Fix CVE-2024-4067.

Signed-off-by: AWSHurneyt <hurneyt@amazon.com>
opensearch-project · Sep 5, 2024 · fac50b0 · fac50b0
1 parent 39a0143
commit fac50b0
Show file tree

Hide file tree

Showing 3 changed files with 155 additions and 931 deletions.
diff --git a/package.json b/package.json
@@ -62,7 +62,8 @@
     "semver": "^5.7.2",
     "**/d3-color": "^3.1.0",
     "@cypress/request": "^3.0.0",
-    "braces": "^3.0.3"
+    "braces": "^3.0.3",
+    "micromatch": "^4.0.8"
   },
   "engines": {
     "yarn": "^1.21.1"

diff --git a/release-notes/opensearch-alerting-dashboards-plugin.release-notes-2.17.0.0.md b/release-notes/opensearch-alerting-dashboards-plugin.release-notes-2.17.0.0.md
@@ -4,6 +4,7 @@ Compatible with OpenSearch Dashboards 2.17.0
 ### Maintenance
 * Increment version to 2.17.0.0 ([#1054](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1054))
 * [CVE-2024-4068] Pinned package version for braces ([#1024](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1024))
+* [CVE-2024-4067] Fix CVE-2024-4067. ([#1074](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1074))
 
 ### Refactoring
 * support date_nanos type when select time field for creating monitor ([#954](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/954))