Problem/Motivation

While security scan found that glob@8.0.3 there is VULNERABILITY CWE-772 & CVSS 6.2 is there.
Need to upgrade to glob 9

CommentFileSizeAuthor
#5 jquery_ui-update-the-package-inside-package-json-3445380-5.patch17.95 KBv.dovhaliuk

Issue fork jquery_ui-3445380

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

vipul tulse created an issue. See original summary.

Rajeshreeputra made their first commit to this issue’s fork.

Rajeshreeputra opened merge request !18

rajeshreeputra’s picture

rajeshreeputra
he/him
Location Pune
commented
Status: Active » Needs review

Updated glob to 10.

v.dovhaliuk’s picture

v.dovhaliuk commented
StatusFileSize
new jquery_ui-update-the-package-inside-package-json-3445380-5.patch17.95 KB

The patch has been provided since using MR as a patch is a security issue.

joseph.olstad’s picture

joseph.olstad
Primary language French
commented
Related issues: +#3543901: update the package inside package.json to latest for security purpose

I've forked jquery_ui into a drop-in replacement and I will fix this issue in the fork. See the related issue, and I will credit you all for this work.

Thank you very much.

#3543901: update the package inside package.json to latest for security purpose

  • rajeshreeputra committed 45327884 on 8.x-1.x 
    Issue #3445380 by rajeshreeputra, v.dovhaliuk, vipul tulse: update the...
rajeshreeputra’s picture

rajeshreeputra
he/him
Location Pune
commented
Status: Needs review » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.