Skip to content

security: fix S360 container image vulnerabilities (2026-07-06) #188

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
hippogr wants to merge 3 commits into
base: dev
Choose a base branch
from
Open

security: fix S360 container image vulnerabilities (2026-07-06) #188

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
0a4374a
security: fix S360 container image vulnerabilities (2026-07-06)
Jul 6, 2026
a585b80
security: fix remaining Go 1.25.10 references
Jul 6, 2026
0a184ec
security: sync overrides with resolutions for dompurify and js-yaml
Jul 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 9 additions & 6 deletions src/alert-manager/src/alert-handler/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,11 @@
"express@*": "5.2.1",
"body-parser@*": "2.2.1",
"@messageformat/runtime@*": "3.0.2",
"js-yaml@*": "4.1.1",
"js-yaml@*": "4.2.0",
"@messageformat/core@* > @messageformat/runtime": "3.0.2",
"express@* > body-parser": "2.2.1",
"@eslint/eslintrc@* > js-yaml": "4.1.1",
"@kubernetes/client-node@* > js-yaml": "4.1.1",
"@eslint/eslintrc@* > js-yaml": "4.2.0",
"@kubernetes/client-node@* > js-yaml": "4.2.0",
"@messageformat/core@3.4.0 > @messageformat/runtime": "3.0.2"
},
"resolutions": {
Expand All @@ -66,18 +66,21 @@
"lodash": "^4.18.0",
"axios": "^1.16.0",
"minimatch": "^10.2.3",
"form-data": "^4.0.4",
"form-data": "^4.0.6",
Comment thread
hippogr marked this conversation as resolved.
"underscore": "^1.13.8",
"path-to-regexp": "^8.4.0",
"brace-expansion": "^5.0.6",
"mailparser": "^3.9.3",
"flatted": "^3.4.2",
"ajv": "^6.14.0",
"nodemailer": "^8.0.5",
"nodemailer": "^8.0.9",
"follow-redirects": "^1.16.0",
"ip-address": "^10.1.1",
"ws": "^8.20.1",
"uuid": "11.1.1"
"uuid": "11.1.1",
"joi": ">=17.13.4",
Comment thread
hippogr marked this conversation as resolved.
"js-yaml": "^4.2.0",
"linkify-it": ">=5.0.1"
},
"scripts": {
"lint": "eslint .",
Expand Down
134 changes: 76 additions & 58 deletions src/alert-manager/src/alert-handler/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -137,6 +137,15 @@ __metadata:
languageName: node
linkType: hard

"@hapi/address@npm:^5.1.1":
version: 5.1.1
resolution: "@hapi/address@npm:5.1.1"
dependencies:
"@hapi/hoek": "npm:^11.0.2"
checksum: 10c0/78138effe1e9a36fd12eb42e24adf97f3ca94b9ab1f6db65e3136cf0e5cdbd1578c14adffde18a50d776db2f326a8cb3a16d783b6705b22571a603fa47c8c3d3
languageName: node
linkType: hard

"@hapi/boom@npm:^10.0.0":
version: 10.0.1
resolution: "@hapi/boom@npm:10.0.1"
Expand All @@ -146,26 +155,40 @@ __metadata:
languageName: node
linkType: hard

"@hapi/hoek@npm:^11.0.2":
"@hapi/formula@npm:^3.0.2":
version: 3.0.2
resolution: "@hapi/formula@npm:3.0.2"
checksum: 10c0/794d30dd13ecc070b9d93e01dacad8175c270f89bcfaa92300f843b7666d915b319d0b792694385d79270c84b52f003a4310f117202303cce3069808751f7a41
languageName: node
linkType: hard

"@hapi/hoek@npm:^11.0.2, @hapi/hoek@npm:^11.0.7":
version: 11.0.7
resolution: "@hapi/hoek@npm:11.0.7"
checksum: 10c0/39a4a3ae9526ed66509f6d03c6eb43179a2590df6e98443328c966cfa5e7cbb9d340f61fdbe0afe092662d5377d5a611c3303c808fee26a9c9cfd6bd3737dc1c
languageName: node
linkType: hard

"@hapi/hoek@npm:^9.0.0, @hapi/hoek@npm:^9.3.0":
version: 9.3.0
resolution: "@hapi/hoek@npm:9.3.0"
checksum: 10c0/a096063805051fb8bba4c947e293c664b05a32b47e13bc654c0dd43813a1cec993bdd8f29ceb838020299e1d0f89f68dc0d62a603c13c9cc8541963f0beca055
"@hapi/pinpoint@npm:^2.0.1":
version: 2.0.1
resolution: "@hapi/pinpoint@npm:2.0.1"
checksum: 10c0/b3072f2c57c9fa2e44d85168e253e331324158509e1c45dae2676f31555326410345fd2422f890c41201e2783c5e9bb8c7b0bdcf6abe01079742a943b0c300b9
languageName: node
linkType: hard

"@hapi/topo@npm:^5.1.0":
version: 5.1.0
resolution: "@hapi/topo@npm:5.1.0"
"@hapi/tlds@npm:^1.1.1":
version: 1.1.7
resolution: "@hapi/tlds@npm:1.1.7"
checksum: 10c0/8429f08c83cd7d324f9b5a577442f78b2d721beba037f8a2a7f652707750800985e0f81302c4b98e9bc784717374005eb3758fb5af6dfb828c62fbb9a4f83a87
languageName: node
linkType: hard

"@hapi/topo@npm:^6.0.2":
version: 6.0.2
resolution: "@hapi/topo@npm:6.0.2"
dependencies:
"@hapi/hoek": "npm:^9.0.0"
checksum: 10c0/b16b06d9357947149e032bdf10151eb71aea8057c79c4046bf32393cb89d0d0f7ca501c40c0f7534a5ceca078de0700d2257ac855c15e59fe4e00bba2f25c86f
"@hapi/hoek": "npm:^11.0.2"
checksum: 10c0/5a0079805e9a542bdb852912ce6ed3221ddd0a58569354b3900e165faabe50fb1d2d488067db97c494194835684b055828b6267be3064ac42cf2ce28db02edfc
languageName: node
linkType: hard

Expand Down Expand Up @@ -500,26 +523,10 @@ __metadata:
languageName: node
linkType: hard

"@sideway/address@npm:^4.1.5":
version: 4.1.5
resolution: "@sideway/address@npm:4.1.5"
dependencies:
"@hapi/hoek": "npm:^9.0.0"
checksum: 10c0/638eb6f7e7dba209053dd6c8da74d7cc995e2b791b97644d0303a7dd3119263bcb7225a4f6804d4db2bc4f96e5a9d262975a014f58eae4d1753c27cbc96ef959
languageName: node
linkType: hard

"@sideway/formula@npm:^3.0.1":
version: 3.0.1
resolution: "@sideway/formula@npm:3.0.1"
checksum: 10c0/3fe81fa9662efc076bf41612b060eb9b02e846ea4bea5bd114f1662b7f1541e9dedcf98aff0d24400bcb92f113964a50e0290b86e284edbdf6346fa9b7e2bf2c
languageName: node
linkType: hard

"@sideway/pinpoint@npm:^2.0.0":
version: 2.0.0
resolution: "@sideway/pinpoint@npm:2.0.0"
checksum: 10c0/d2ca75dacaf69b8fc0bb8916a204e01def3105ee44d8be16c355e5f58189eb94039e15ce831f3d544f229889ccfa35562a0ce2516179f3a7ee1bbe0b71e55b36
"@standard-schema/spec@npm:^1.1.0":
version: 1.1.0
resolution: "@standard-schema/spec@npm:1.1.0"
checksum: 10c0/d90f55acde4b2deb983529c87e8025fa693de1a5e8b49ecc6eb84d1fd96328add0e03d7d551442156c7432fd78165b2c26ff561b970a9a881f046abb78d6a526
languageName: node
linkType: hard

Expand Down Expand Up @@ -2260,16 +2267,16 @@ __metadata:
languageName: node
linkType: hard

"form-data@npm:^4.0.4":
version: 4.0.5
resolution: "form-data@npm:4.0.5"
"form-data@npm:^4.0.6":
version: 4.0.6
resolution: "form-data@npm:4.0.6"
dependencies:
asynckit: "npm:^0.4.0"
combined-stream: "npm:^1.0.8"
es-set-tostringtag: "npm:^2.1.0"
hasown: "npm:^2.0.2"
mime-types: "npm:^2.1.12"
checksum: 10c0/dd6b767ee0bbd6d84039db12a0fa5a2028160ffbfaba1800695713b46ae974a5f6e08b3356c3195137f8530dcd9dfcb5d5ae1eeff53d0db1e5aad863b619ce3b
hasown: "npm:^2.0.4"
mime-types: "npm:^2.1.35"
checksum: 10c0/43947a77bf0ff45c6ceed789778982d47a3f3e720a74b71721174ebf3310a5f1a8be1d6b38a3ee3688e8a18a2c4273073ec0844cd37efda3eaf46d41c9c318ff
languageName: node
linkType: hard

Expand Down Expand Up @@ -2477,6 +2484,15 @@ __metadata:
languageName: node
linkType: hard

"hasown@npm:^2.0.4":
version: 2.0.4
resolution: "hasown@npm:2.0.4"
dependencies:
function-bind: "npm:^1.1.2"
checksum: 10c0/2d8de939e270b70618f8cebb69746620db10617dbb495bc66ddad326955ea24d3ca4af133aff3eb7c1853e0218f867bc2b050ec26fe02e3aea58f880ffc5e506
languageName: node
linkType: hard

"he@npm:1.2.0":
version: 1.2.0
resolution: "he@npm:1.2.0"
Expand Down Expand Up @@ -2984,16 +3000,18 @@ __metadata:
languageName: node
linkType: hard

"joi@npm:^17.13.3":
version: 17.13.3
resolution: "joi@npm:17.13.3"
"joi@npm:>=17.13.4":
version: 18.2.3
resolution: "joi@npm:18.2.3"
dependencies:
"@hapi/hoek": "npm:^9.3.0"
"@hapi/topo": "npm:^5.1.0"
"@sideway/address": "npm:^4.1.5"
"@sideway/formula": "npm:^3.0.1"
"@sideway/pinpoint": "npm:^2.0.0"
checksum: 10c0/9262aef1da3f1bec5b03caf50c46368899fe03b8ff26cbe3d53af4584dd1049079fc97230bbf1500b6149db7cc765b9ee45f0deb24bb6fc3fa06229d7148c17f
"@hapi/address": "npm:^5.1.1"
"@hapi/formula": "npm:^3.0.2"
"@hapi/hoek": "npm:^11.0.7"
"@hapi/pinpoint": "npm:^2.0.1"
"@hapi/tlds": "npm:^1.1.1"
"@hapi/topo": "npm:^6.0.2"
"@standard-schema/spec": "npm:^1.1.0"
checksum: 10c0/ccf2cba791968330208d05ab2e4459d1f9532a31fd5323795734184dfa628a9373bca4252fc0b636a36656c5b7be4a28e986715737a8a779b8103a28d9988cd2
languageName: node
linkType: hard

Expand All @@ -3011,14 +3029,14 @@ __metadata:
languageName: node
linkType: hard

"js-yaml@npm:^4.1.0, js-yaml@npm:^4.1.1":
version: 4.1.1
resolution: "js-yaml@npm:4.1.1"
"js-yaml@npm:^4.2.0":
version: 4.3.0
resolution: "js-yaml@npm:4.3.0"
dependencies:
argparse: "npm:^2.0.1"
bin:
js-yaml: bin/js-yaml.js
checksum: 10c0/561c7d7088c40a9bb53cc75becbfb1df6ae49b34b5e6e5a81744b14ae8667ec564ad2527709d1a6e7d5e5fa6d483aa0f373a50ad98d42fde368ec4a190d4fae7
checksum: 10c0/058b30473d6915ca5b4feb11e2f7d4d97242f98d00a798ed48dd90b46b7c640398afe9128c5db22c5300f8c6528fe2a174b9a93f351a70ebc28c6203938d8bff
languageName: node
linkType: hard

Expand Down Expand Up @@ -3164,12 +3182,12 @@ __metadata:
languageName: node
linkType: hard

"linkify-it@npm:5.0.0":
version: 5.0.0
resolution: "linkify-it@npm:5.0.0"
"linkify-it@npm:>=5.0.1":
version: 5.0.2
resolution: "linkify-it@npm:5.0.2"
dependencies:
uc.micro: "npm:^2.0.0"
checksum: 10c0/ff4abbcdfa2003472fc3eb4b8e60905ec97718e11e33cca52059919a4c80cc0e0c2a14d23e23d8c00e5402bc5a885cdba8ca053a11483ab3cc8b3c7a52f88e2d
checksum: 10c0/dd70b1735a13d41a2cff0a058ac3771166038f23f6aff004dd53873cf985c64b107902fe0b544a5b3d1ff6e63249cf9c648fb3ae9f285481db48f56887adb0d6
languageName: node
linkType: hard

Expand Down Expand Up @@ -3270,7 +3288,7 @@ __metadata:
languageName: node
linkType: hard

"mime-types@npm:^2.1.12":
"mime-types@npm:^2.1.35":
version: 2.1.35
resolution: "mime-types@npm:2.1.35"
dependencies:
Expand Down Expand Up @@ -3391,10 +3409,10 @@ __metadata:
languageName: node
linkType: hard

"nodemailer@npm:^8.0.5":
version: 8.0.5
resolution: "nodemailer@npm:8.0.5"
checksum: 10c0/5e8450499bd059c56d74ba96fa5f9928de2ecdae0d53c083dba5661d797114c1f9524d30f992d0263cc5a7dcf5a54b9c1d92dc1f766da150c9d0bde7d3798431
"nodemailer@npm:^8.0.9":
version: 8.0.11
resolution: "nodemailer@npm:8.0.11"
checksum: 10c0/19229216c63a32eae59d7b39f3dffeba20be317f2335d08d86fb70bd01845a1bf108fecd019c0e90ef186e3d9177cf478192b333cf38620ad0f8c7a6e1e5ae05
languageName: node
linkType: hard

Expand Down
7 changes: 4 additions & 3 deletions src/alert-manager/src/job-status-change-notification/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,20 +49,21 @@
"lodash": "^4.18.0",
"minimatch": "^10.2.3",
"ajv": "^8.18.0",
"form-data": "^4.0.4",
"form-data": "^4.0.6",
"dottie": ">=2.0.7",
"flatted": "^3.4.2",
"underscore": ">=1.13.8",
"path-to-regexp": ">=8.4.0",
"nodemailer": ">=8.0.4",
"nodemailer": ">=8.0.9",
"brace-expansion": "5.0.6",
"mailparser": ">=3.9.3",
"validator": "^13.15.22",
"semver": "^6.3.1",
"follow-redirects": "^1.16.0",
"axios": "^1.15.1",
"fast-uri": "^3.1.1",
"uuid": "11.1.1"
"uuid": "11.1.1",
"joi": ">=17.13.4"
Comment thread
hippogr marked this conversation as resolved.
},
"scripts": {
"lint": "eslint .",
Expand Down
Loading