Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.x] [Multiple Datasource] Add component to show single selected data source in read only mode #6262

Merged
merged 1 commit into from
Mar 25, 2024

[Multiple Datasource] Add component to show single selected data sour…

e2cbbf4
Select commit
Loading
Failed to load commit list.
Merged

[Backport 2.x] [Multiple Datasource] Add component to show single selected data source in read only mode #6262

[Multiple Datasource] Add component to show single selected data sour…
e2cbbf4
Select commit
Loading
Failed to load commit list.
Mend for GitHub.com / WhiteSource Security Check failed Mar 25, 2024 in 18m 17s

Security Report

You have successfully remediated 7 vulnerabilities, but introduced 3 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
WS-2017-3772

Vulnerable Source Files:

❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js

High 7.5 juice-shopjuice-shop-14.0.0_node14_darwin_x64 Upgrade to version: underscore.string - 3.3.5 #4734
CVE-2023-26156

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/chromedriver/package.json

Dependency Hierarchy:

-> ❌ chromedriver-107.0.3.tgz (Vulnerable Library)

High 7.5 chromedriver-107.0.3.tgz Upgrade to version: chromedriver - 119.0.1 None
CVE-2019-20149
High 7.5 juice-shopjuice-shop-13.3.0_node16_darwin_x64 Upgrade to version: 6.0.3 #4726

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2015-9251 jquery-1.11.1.js
CVE-2019-20149 juice-shop-juice-shop-15.2.0_node16_win32_x64
CVE-2019-11358 jquery-1.11.1.js
WS-2017-3772 juice-shop-juice-shop-14.5.1_node16_darwin_x64
CVE-2020-11022 jquery-1.11.1.js
CVE-2023-28155 request-2.88.12.tgz
CVE-2020-11023 jquery-1.11.1.js

Base branch total remaining vulnerabilities: 16
Base branch commit: a9b400e42cf9949e7e647c0da5c37bbcd6d0f6d7


Total libraries scanned: 2510

Scan token: 00f7230f48fc47b7810e73532ba19e47