Skip to content

Application metadata - #220

Draft
rimi-itk wants to merge 6 commits into
OS2iot:stagefrom
itk-dev:feature/application-metadata
Draft

rimi-itk wants to merge 6 commits into
OS2iot:stagefrom
itk-dev:feature/application-metadata

Updated metadata display

238e748
Select commit
Loading
Failed to load commit list.
Debricked / Vulnerability analysis completed Mar 27, 2026 in 17s

An automation triggered a pipeline warning

Found 37 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.

Output from Automations

4 rules were checked:


If a new dependency is added where the license risk is at least medium

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected and which has not triggered this rule for this dependency before

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If there is a dependency where the license risk is at least high

then send a pipeline warning

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected

then send a pipeline warning

⚠️ The rule triggered for the following vulnerabilities, causing a pipeline warning. Manage rule

Vulnerability CVSS2 CVSS3 CVSS4 Dependency Dependency Licenses
CVE-2026-25547 N/A N/A 9.2 @isaacs/brace-expansion (npm) MIT
CVE-2026-27606 N/A 9.8 8.8 rollup (npm) MIT
CVE-2026-0621 N/A 7.5 8.7 @modelcontextprotocol/sdk (npm) MIT
CVE-2025-66031 N/A 7.5 8.7 node-forge (npm) GPL-2.0-only
CVE-2026-26996 N/A 7.5 8.7 minimatch (npm) BlueOak-1.0.0
CVE-2026-26996 N/A 7.5 8.7 minimatch (npm) BlueOak-1.0.0
CVE-2026-26996 N/A 7.5 8.7 minimatch (npm) BlueOak-1.0.0
CVE-2026-29063 N/A N/A 8.7 immutable (npm) MIT
CVE-2026-33151 N/A N/A 8.7 socket.io-parser (npm) MIT
CVE-2026-32635 N/A N/A 8.6 @angular/core (npm) MIT
CVE-2025-12816 N/A 8.6 N/A node-forge (npm) GPL-2.0-only
CVE-2026-32635 N/A N/A 8.6 @angular/compiler (npm) MIT
CVE-2025-66412 N/A 5.4 8.5 @angular/compiler (npm) MIT
CVE-2025-66412 N/A 5.4 8.5 @angular/compiler (npm) MIT
CVE-2026-22610 N/A 6.1 8.5 @angular/compiler (npm) MIT
CVE-2026-22610 N/A 6.1 8.5 @angular/core (npm) MIT
CVE-2026-22610 N/A 6.1 8.5 @angular/compiler (npm) MIT
CVE-2026-22610 N/A 6.1 8.5 @angular/core (npm) MIT
CVE-2026-23745 N/A 6.1 8.2 tar (npm) ISC
CVE-2026-23745 N/A 6.1 8.2 tar (npm) ISC
CVE-2026-24842 N/A 8.2 N/A tar (npm) ISC
CVE-2026-24842 N/A 8.2 N/A tar (npm) ISC
CVE-2026-29786 N/A 6.3 8.2 tar (npm) ISC
CVE-2026-31802 N/A 5.5 8.2 tar (npm) ISC
CVE-2026-29786 N/A 6.3 8.2 tar (npm) ISC
CVE-2026-31802 N/A 5.5 8.2 tar (npm) ISC
CVE-2025-66035 N/A N/A 7.7 @angular/common (npm) MIT
CVE-2025-66414 N/A 8.1 7.6 @modelcontextprotocol/sdk (npm) MIT
CVE-2025-64756 N/A 7.5 N/A glob (npm) ISC
CVE-2026-27904 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-27903 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-32141 N/A 7.5 N/A flatted (npm) ISC
CVE-2026-27904 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-27903 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-27903 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-27904 N/A 7.5 N/A minimatch (npm) BlueOak-1.0.0
CVE-2026-26960 N/A 7.1 N/A tar (npm) ISC
CVE-2026-25536 N/A 7.1 N/A @modelcontextprotocol/sdk (npm) MIT
CVE-2026-26960 N/A 7.1 N/A tar (npm) ISC
CVE-2025-13465 N/A 5.3 6.9 lodash (npm) MIT
CVE-2026-2391 N/A 7.5 6.3 qs (npm) BSD-3-Clause
CVE-2025-15284 N/A 3.7 6.3 qs (npm) BSD-3-Clause
CVE-2026-2391 N/A 7.5 6.3 qs (npm) BSD-3-Clause
CVE-2025-15284 N/A 3.7 6.3 qs (npm) BSD-3-Clause
CVE-2025-66030 N/A 5.3 6.3 node-forge (npm) GPL-2.0-only
CVE-2025-64118 N/A N/A 6.1 tar (npm) ISC
CVE-2026-23950 N/A 5.9 N/A tar (npm) ISC
CVE-2026-23950 N/A 5.9 N/A tar (npm) ISC
CVE-2025-13466 N/A N/A 5.5 body-parser (npm) MIT
CVE-2021-4231 3.5 5.4 N/A @angular/core (npm) MIT
CVE-2025-64718 N/A 5.3 N/A js-yaml (npm) MIT
CVE-2025-64718 N/A 5.3 N/A js-yaml (npm) MIT
CVE-2025-68157 N/A 3.7 N/A webpack (npm) MIT
CVE-2025-68458 N/A 3.7 N/A webpack (npm) MIT
CVE-2025-69873 N/A 2.9 N/A ajv (npm) MIT
CVE-2025-69873 N/A 2.9 N/A ajv (npm) MIT
GHSA-5c6j-r48x-rmvq N/A N/A N/A serialize-javascript (npm) BSD-3-Clause
debricked-335402 N/A N/A N/A diff (npm) BSD-3-Clause