Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CVE-2022-29622] resolve formidable to ^3.2.4 #2878

Closed
wants to merge 1 commit into from

Conversation

zhongnansu
Copy link
Member

@zhongnansu zhongnansu commented Nov 15, 2022

Signed-off-by: Su szhongna@amazon.com

Description

[Describe what this change achieves]

Issues Resolved

#1593

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

Signed-off-by: Su <szhongna@amazon.com>
@zhongnansu zhongnansu added Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry cve Security vulnerabilities detected by Dependabot or Mend labels Nov 16, 2022
@codecov-commenter
Copy link

codecov-commenter commented Nov 16, 2022

Codecov Report

Merging #2878 (f90201e) into main (b19c171) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #2878   +/-   ##
=======================================
  Coverage   66.68%   66.68%           
=======================================
  Files        3219     3219           
  Lines       61445    61445           
  Branches     9417     9417           
=======================================
  Hits        40972    40972           
+ Misses      18228    18227    -1     
- Partials     2245     2246    +1     
Impacted Files Coverage Δ
...ic/application/models/sense_editor/sense_editor.ts 64.00% <0.00%> (-0.89%) ⬇️
...ared/static/forms/hook_form_lib/hooks/use_field.ts 66.66% <0.00%> (+0.96%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@zhongnansu
Copy link
Member Author

CVE revoked by mend, closing

@zhongnansu zhongnansu closed this Dec 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend Skip-Changelog PRs that are too trivial to warrant a changelog or release notes entry
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants