[VisBuilder] Change VisBuilder from experimental to production (#6436)
Security Report
| CVE | Severity |  CVSS Score |
Vulnerable Library | Suggested Fix | Issue |
|---|---|---|---|---|---|
WS-2017-3772Vulnerable Source Files: ❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js |
 High |
7.5 | juice-shopjuice-shop-14.5.1_node16_darwin_x64 | Upgrade to version: underscore.string - 3.3.5 | #4734 |
CVE-2023-28155Path to dependency file: /package.json Path to vulnerable library: /node_modules/@cypress/request/package.json Dependency Hierarchy: -> cypress-9.5.4.tgz (Root Library) -> ❌ request-2.88.12.tgz (Vulnerable Library) |
 Medium |
6.1 | request-2.88.12.tgz | Upgrade to version: @cypress/request - 3.0.0 | #5893 |
CVE-2023-26487Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium |
6.1 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3525 |
CVE-2023-26486Path to dependency file: /node_modules/leaflet-vega/demo/demo.html Path to vulnerable library: /node_modules/leaflet-vega/demo/demo.html Dependency Hierarchy: -> ❌ vega-5.22.1.js (Vulnerable Library) |
Medium |
6.1 | vega-5.22.1.js | Upgrade to version: vega - 5.23.0, vega-functions - 5.13.1 | #3526 |
CVE-2020-11023Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jquery - 3.5.0;jquery-rails - 4.4.0 | #4732 |
CVE-2020-11022Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.5.0 | #4733 |
CVE-2019-8331Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.1,4.3.1;bootstrap-sass - 3.4.1,4.3.1 | #4722 |
CVE-2019-11358Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jquery - 3.4.0 | #4730 |
CVE-2018-20677Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0 | #4725 |
CVE-2018-20676Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0 | #4728 |
CVE-2018-14042Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0,4.1.2 | #4727 |
CVE-2016-10735Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
Medium |
6.1 | bootstrap-3.3.7.min.js | Upgrade to version: bootstrap - 3.4.0, 4.0.0-beta.2 | #4729 |
CVE-2015-9251Path to dependency file: /node_modules/javascript-natural-sort/unit-tests.html Path to vulnerable library: /node_modules/javascript-natural-sort/unit-tests.html Dependency Hierarchy: -> ❌ jquery-1.11.1.js (Vulnerable Library) |
Medium |
6.1 | jquery-1.11.1.js | Upgrade to version: jQuery - 3.0.0 | #4736 |
| Medium |
5.3 | juice-shopjuice-shop-15.2.0_node16_win32_x64 | Upgrade to version: micromatch - 4.0.6 | #6791 | |
CVE-2023-44270Path to dependency file: /package.json Path to vulnerable library: /node_modules/postcss/package.json Dependency Hierarchy: -> ❌ postcss-8.4.12.tgz (Vulnerable Library) |
Medium |
5.3 | postcss-8.4.12.tgz | Upgrade to version: postcss - 8.4.31 | #5178 |
CVE-2018-14040Path to dependency file: /node_modules/leaflet-draw/docs/examples/basic.html Path to vulnerable library: /node_modules/leaflet-draw/docs/examples/basic.html Dependency Hierarchy: -> ❌ bootstrap-3.3.7.min.js (Vulnerable Library) |
 Low |
3.7 | bootstrap-3.3.7.min.js | Upgrade to version: org.webjars.npm:bootstrap:4.1.2,org.webjars:bootstrap:3.4.0 | #4723 |
Total libraries scanned: 2553
Scan token: 9a3c38e0f42449d182c3e00abc51232b