[Backport 2.x] [discover] undefined datasource fix for index patterns for PPL and SQL #8028
Mend for GitHub.com / WhiteSource Security Check
failed
Sep 5, 2024 in 13m 59s
Security Report
You have successfully remediated 2 vulnerabilities, but introduced 2 new vulnerabilities in this branch.
❌ New vulnerabilities:
CVE | Severity | CVSS Score | Vulnerable Library | Suggested Fix | Issue |
---|---|---|---|---|---|
CVE-2023-26156Path to dependency file: /package.json Path to vulnerable library: /node_modules/chromedriver/package.json Dependency Hierarchy: -> ❌ chromedriver-107.0.3.tgz (Vulnerable Library) |
High | 7.5 | chromedriver-107.0.3.tgz | Upgrade to version: chromedriver - 119.0.1 | None |
Medium | 5.3 | juice-shopjuice-shop-14.0.0_node14_darwin_x64 | Upgrade to version: micromatch - 4.0.8 | #6791 |
✔️ Remediated vulnerabilities:
CVE | Vulnerable Library |
---|---|
CVE-2023-28155 | request-2.88.12.tgz |
CVE-2024-4067 | juice-shop-juice-shop-15.2.0_node16_win32_x64 |
Base branch total remaining vulnerabilities: 18
Base branch commit: 06816d59e10ac2bb9ad93f9f89ec9a791962f228
Total libraries scanned: 2459
Scan token: e77839466eed415c930b651376e5b69e
Loading