Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2023-36665, CVE-2022-35177 #430

Merged
merged 1 commit into from
Jan 16, 2024
Merged

Fix CVE-2023-36665, CVE-2022-35177 #430

merged 1 commit into from
Jan 16, 2024

Conversation

deathalt
Copy link
Contributor

Update protobufjs to 7.0.5 to avoid CVE-2023-36665, remove dev dependencies to fix CVE-2022-35177, make production container non root

…encies to fix CVE-2022-35177, make production container non root
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


Андрей Лалаев seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

Copy link

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
protobufjs 7.2.4...7.2.5 None +0/-0 2.77 MB google-wombot

@lmangani lmangani merged commit 74e5a40 into metrico:master Jan 16, 2024
10 checks passed
@lmangani
Copy link
Collaborator

Thanks @deathalt for your contribution ⭐

@lmangani lmangani added the enhancement New feature or request label Jan 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants