Skip to content

Update dependencies to address security vulnerabilities #310

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 5 commits into from
Jul 27, 2023
Merged

Update dependencies to address security vulnerabilities #310

merged 5 commits into from
Jul 27, 2023

Conversation

bestbeforetoday
Copy link
Member

@bestbeforetoday bestbeforetoday commented Jul 26, 2023 •
edited
Loading

Also update dependency-check version.

Contributes to #307

@bestbeforetoday bestbeforetoday force-pushed the vulnerabilities branch 5 times, most recently from 2656d83 to ed14d80 Compare July 26, 2023 17:56
@bestbeforetoday
Update dependencies to address CVE-2020-15522
d46a281 
Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@bestbeforetoday
Update dependencies to address CVE-2023-32732
a0f914d 
Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@bestbeforetoday
Update dependencies to address CVE-2022-3171, CVE-2022-3509, CVE-2022…
9449419 
…-3510

Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@bestbeforetoday
Update dependencies to address CVE-2022-45688
e0830ca 
Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@bestbeforetoday
Update dependency-check version
0216ecc 
Signed-off-by: Mark S. Lewis <Mark.S.Lewis@outlook.com>
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.4% 0.4% Duplication

@bestbeforetoday bestbeforetoday marked this pull request as ready for review July 27, 2023 01:59
@bestbeforetoday bestbeforetoday requested a review from a team as a code owner July 27, 2023 01:59
@bestbeforetoday bestbeforetoday enabled auto-merge (squash) July 27, 2023 02:00
@bestbeforetoday bestbeforetoday merged commit 3b5b2cb into hyperledger:main Jul 27, 2023
@benjsmi benjsmi mentioned this pull request Jul 27, 2023
Closed
@benjsmi
Copy link
Contributor

benjsmi commented Jul 27, 2023

I moved the fabric-chaincode-shim specific vulnerabilities to #311. This PR looks like it addresses those. Doing 1-by-1 checks now.

@bestbeforetoday bestbeforetoday deleted the vulnerabilities branch April 3, 2025 15:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@denyeart denyeart denyeart approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@bestbeforetoday @benjsmi @denyeart