Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2022-46175 #586

Merged
merged 1 commit into from
Jan 23, 2023
Merged

Conversation

bowenlan-amzn
Copy link
Member

@bowenlan-amzn bowenlan-amzn commented Jan 23, 2023

Signed-off-by: bowenlan-amzn bowenlan23@gmail.com

Description

https://nvd.nist.gov/vuln/detail/CVE-2022-46175

This dep comes from OpenSearch Dashboards and has been fixed on their side, remove yarn.lock and do yarn osd boostrap to regenerate it gets the updated version

Check List

  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
@bowenlan-amzn bowenlan-amzn merged commit 7192b2b into opensearch-project:main Jan 23, 2023
opensearch-trigger-bot bot pushed a commit that referenced this pull request Jan 23, 2023
Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
(cherry picked from commit 7192b2b)
opensearch-trigger-bot bot pushed a commit that referenced this pull request Jan 23, 2023
Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
(cherry picked from commit 7192b2b)
AWSHurneyt pushed a commit that referenced this pull request Jan 24, 2023
Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
(cherry picked from commit 7192b2b)

Co-authored-by: bowenlan-amzn <bowenlan23@gmail.com>
bowenlan-amzn added a commit that referenced this pull request Jan 24, 2023
Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>

Signed-off-by: bowenlan-amzn <bowenlan23@gmail.com>
(cherry picked from commit 7192b2b)

Co-authored-by: bowenlan-amzn <bowenlan23@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants