Skip to content

[bug] address different issues with dataset selector (#8665)

Mend for github.com / WhiteSource Security Check failed Oct 19, 2024 in 11m 56s

Security Report

You have successfully remediated 2 vulnerabilities, but introduced 2 new vulnerabilities in this branch.

❌ New vulnerabilities:

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
WS-2017-3772

Vulnerable Source Files:

❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js

High 7.5 juice-shopjuice-shop-14.5.1_node16_darwin_x64 Upgrade to version: underscore.string - 3.3.5 #4734
CVE-2023-26156

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/chromedriver/package.json

Dependency Hierarchy:

-> ❌ chromedriver-107.0.3.tgz (Vulnerable Library)

Medium 5.6 chromedriver-107.0.3.tgz Upgrade to version: chromedriver - 119.0.1 None

✔️ Remediated vulnerabilities:

CVE Vulnerable Library
CVE-2023-28155 request-2.88.12.tgz
WS-2017-3772 juice-shop-juice-shop-15.3.0_node20_win32_x64

Base branch total remaining vulnerabilities: 16
Base branch commit: e23f3327d95552b2b42767149725eb987d56c3e7


Total libraries scanned: 2459

Scan token: fe7649bbed0240d18497e504f82d374a