Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

refactor(connector-besu): update base image to fix npm vulnerabilities #2142

Closed
aldousalvarez opened this issue Aug 5, 2022 · 2 comments · Fixed by #2143
Closed

refactor(connector-besu): update base image to fix npm vulnerabilities #2142

aldousalvarez opened this issue Aug 5, 2022 · 2 comments · Fixed by #2143
Assignees
@aldousalvarez

Comments

@aldousalvarez
Copy link
Contributor

The connector-besu Dockerfile uses cmd-api-server image as its base image. And based on the latest azure container scan the cmd-api-server image that was being used contains the following npm vulnerabilities (CVE-2022-29244, CVE-2021-39135) which is now fixed by PR #2137.
@aldousalvarez
Copy link
Contributor Author

Hello @petermetz Can you assign me on this one? Thank you!

aldousalvarez added a commit to aldousalvarez/cactus that referenced this issue Aug 5, 2022
@aldousalvarez
refactor(connector-besu): update base image to fix npm vulnerabilities
85b8704 
Fixes hyperledger-cacti#2142

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
@aldousalvarez aldousalvarez mentioned this issue Aug 5, 2022
Merged
@petermetz
Copy link
Contributor

Hello @petermetz Can you assign me on this one? Thank you!

@aldousalvarez Done, thank you!

aldousalvarez added a commit to aldousalvarez/cactus that referenced this issue Aug 26, 2022
@aldousalvarez
refactor(connector-besu): update base image to fix npm vulnerabilities
9232287 
Fixes hyperledger-cacti#2142

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
petermetz pushed a commit that referenced this issue Aug 26, 2022
@aldousalvarez @petermetz
refactor(connector-besu): update base image to fix npm vulnerabilities
ee99c87 
Fixes #2142

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
micoferdinand98 pushed a commit to micoferdinand98/cactus that referenced this issue Oct 5, 2022
@aldousalvarez @micoferdinand98
refactor(connector-besu): update base image to fix npm vulnerabilities
97c1ac8 
Fixes hyperledger-cacti#2142

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
micoferdinand98 added a commit to micoferdinand98/cactus that referenced this issue Oct 5, 2022
@micoferdinand98
refactor(connector-besu): update base image to fix npm vulnerabilities
923227d 
Fixes hyperledger-cacti#2142

Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@aldousalvarez aldousalvarez

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

refactor(connector-besu): update base image to fix npm vulnerabilities aldousalvarez/cactus
2 participants
@petermetz @aldousalvarez