Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check logs sprint 18.2 week 2 #5131

Closed
1 task done
pkfec opened this issue May 11, 2022 · 1 comment
Closed
1 task done

Check logs sprint 18.2 week 2 #5131

pkfec opened this issue May 11, 2022 · 1 comment
Assignees
Labels
Security: general General security concern or issue
Milestone

Comments

@pkfec
Copy link
Contributor

pkfec commented May 11, 2022

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

Ref: Check logs Sprint 18.2 week 1

  • Make new tickets for sprint 18.3 weeks 1 & 2
@pkfec pkfec added the Security: general General security concern or issue label May 11, 2022
@pkfec pkfec added this to the Sprint 18.2 milestone May 11, 2022
@cnlucas
Copy link
Member

cnlucas commented May 25, 2022

FEC-CMS:
package.json: None
requirements.txt: [SNYK: Medium]: [pyjwt- Use of a Broken or Risky Cryptographic Algorithm] #5247

OPEN-FEC:
package.json: 1 High, 1 Low
[SNYK: High]: [async- Prototype Pollution] #5125
[SNYK: Low]: [minimist- Prototype Pollution] #5098
[SNYK: High]: [dicer Denial of Service (DoS) #5146 --No remediation path available
[SNYK: Critical]: [formidable Arbitrary File Upload] ---No remediation path available

requirements.txt: 1
[Snyk: Medium]: [Regular Expression Denial of Service (ReDoS)] #5124
flyway: 0

FEC-EREGS:
package.json: 0
requirements.txt: None

FEC-PATTERN-LIBRARY:
package.json: 0

Search logs:
No new users

Cloud.gov Dashboard:
8 accounts (26 total users)

Off-boarding:
None for this week

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Security: general General security concern or issue
Projects
None yet
Development

No branches or pull requests

2 participants