Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[1.3][CVE-2024-33883] Bump ejs from 3.1.7 to 3.1.10 #7740

Merged
merged 1 commit into from
Aug 19, 2024
Merged

[1.3][CVE-2024-33883] Bump ejs from 3.1.7 to 3.1.10 #7740

merged 1 commit into from
Aug 19, 2024

Conversation

ananzh
Copy link
Member

@ananzh ananzh commented Aug 16, 2024

Issues Resolved

CVE-2024-33883

Changelog

  • skip

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

@ananzh ananzh added cve Security vulnerabilities detected by Dependabot or Mend v1.3.19 Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry labels Aug 16, 2024
AMoo-Miki
AMoo-Miki previously approved these changes Aug 17, 2024
View reviewed changes
LDrago27
LDrago27 previously approved these changes Aug 19, 2024
View reviewed changes
@ananzh
[1.3][CVE-2024-33883] Bump ejs from 3.1.7 to 3.1.10
be3de13 
Issue Resolve: CVE-2024-33883

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
@ananzh ananzh dismissed stale reviews from LDrago27 and AMoo-Miki via be3de13 August 19, 2024 16:29
@ananzh ananzh merged commit b99d050 into opensearch-project:1.3 Aug 19, 2024
31 of 32 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@zhongnansu zhongnansu zhongnansu approved these changes

@AMoo-Miki AMoo-Miki AMoo-Miki approved these changes

@LDrago27 LDrago27 LDrago27 left review comments

@kavilla kavilla Awaiting requested review from kavilla kavilla is a code owner

@ashwin-pc ashwin-pc Awaiting requested review from ashwin-pc ashwin-pc is a code owner

@joshuarrrr joshuarrrr Awaiting requested review from joshuarrrr joshuarrrr is a code owner

@abbyhu2000 abbyhu2000 Awaiting requested review from abbyhu2000 abbyhu2000 is a code owner

@zengyan-amazon zengyan-amazon Awaiting requested review from zengyan-amazon zengyan-amazon is a code owner

@manasvinibs manasvinibs Awaiting requested review from manasvinibs manasvinibs is a code owner

@ZilongX ZilongX Awaiting requested review from ZilongX ZilongX is a code owner

@Flyingliuhub Flyingliuhub Awaiting requested review from Flyingliuhub Flyingliuhub is a code owner

@curq curq Awaiting requested review from curq curq is a code owner

@bandinib-amzn bandinib-amzn Awaiting requested review from bandinib-amzn bandinib-amzn is a code owner

@SuZhou-Joe SuZhou-Joe Awaiting requested review from SuZhou-Joe SuZhou-Joe is a code owner

Assignees
No one assigned
Labels
cve Security vulnerabilities detected by Dependabot or Mend Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry v1.3.19
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@ananzh @AMoo-Miki @zhongnansu @LDrago27