Merge requests · OSDU Software / OSDU Data Platform / Security and Compliance / Secret · GitLab

Resolve spring, netty, and commons io CVE

!206 · created Nov 20, 2024 by Timothy Lobl M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management no-detached-pipeline
- Approved
updated Nov 22, 2024
user in dockerfile

!203 · created Nov 06, 2024 by Jiman Kim M25 - Release 0.28
AWS Vulnerability Management
- Merged
- Approved
updated Nov 07, 2024
remediating springmvc vulnerabilities

!197 · created Sep 30, 2024 by Marc Burnie [AWS] M25 - Release 0.28
Common Code Vulnerability Management no-detached-pipeline
- Merged
- Approved
updated Oct 01, 2024
[MS-44783] update core-lib-azure to fix redission vulnerability

!188 · created Aug 13, 2024 by VidyaDharani Lokam M24 - Release 0.27
Azure MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated Aug 27, 2024
update secret driver, fux vulns

!186 · created Aug 08, 2024 by Rustam Lotsmanenko (EPAM) M25 - Release 0.28
RI Vulnerability Management
updated Aug 13, 2024
Addressing apache tomcat DoS vulnerability

!183 · created Jul 26, 2024 by Marc Burnie [AWS] M24 - Release 0.27
Common Code Vulnerability Management no-detached-pipeline
- Merged
- Approved
updated Jul 26, 2024
[#MS44086] build: upgrade spring and spring-boot version

!182 · created Jul 22, 2024 by Thulasi Dass Subramanian M24 - Release 0.27
AWS Azure Common Code GC IBM MRDependencies Upgrade Vulnerability Management
- Merged
- 2
- Approved
updated Jul 26, 2024
[MS-39254] remediate spring related vulnerabilities

!165 · created May 20, 2024 by VidyaDharani Lokam M24 - Release 0.27
Azure Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated May 20, 2024
update springboot version to remediate vulnerabilities

!157 · created Apr 04, 2024 by VidyaDharani Lokam M23 - Release 0.26
Azure Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- +2
- Approved
updated Apr 04, 2024
[MSCOSDU-1894] fix json-smart vulnerability

!132 · created Dec 28, 2023 by VidyaDharani Lokam M23 - Release 0.26
Azure Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated Jan 02, 2024
Use the default AWS WebSecurity instead of the custom defined in Secret

!130 · created Dec 15, 2023 by Guillaume Caillet M22 - Release 0.25 dependency-upgrade
AWS MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Dec 16, 2023
[MSCOSDU-1853] fix json vulnerability 1 of 4 checklist items completed

!128 · created Dec 07, 2023 by VidyaDharani Lokam M22 - Release 0.25
Azure Vulnerability Management
- Merged
- 2
- Approved
updated Dec 11, 2023
Pull latest version of os-core-common

!126 · created Dec 05, 2023 by Solomon Ayalew M22 - Release 0.25
AWS Azure Common Code GC IBM MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Dec 07, 2023
Remediate guava dependency and clean'documentdb-bulkexecutor' 1 of 4 checklist items completed

!107 · created Sep 22, 2023 by Thulasi Dass Subramanian M21 - Release 0.24
Azure Vulnerability Management
- Merged
- 2
- Approved
updated Sep 28, 2023
Remediate netty-handler vulnerability

!103 · created Aug 22, 2023 by Thulasi Dass Subramanian M20 - Release 0.23
AWS Azure Common Code GC MRDependencies Upgrade Vulnerability Management
- Merged
- 2
- Approved
updated Aug 22, 2023
Remediate snakeyaml, guava vulnerabilities

!101 · created Aug 17, 2023 by Thulasi Dass Subramanian M20 - Release 0.23
Azure Common Code GC MRDependencies Upgrade Vulnerability Management
- Merged
- 3
- Approved
updated Aug 18, 2023
spring-security-core upgrade 3 of 4 checklist items completed

!94 · created Jul 07, 2023 by sagar thapa M19 - Release 0.22
Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated Jul 10, 2023
add and upgrade snakeyaml dependency

!75 · created May 04, 2023 by Abhay Joshi M18 - Release 0.21
AWS Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- 1
updated Jul 25, 2023
upgrade spring security web dependency version

!70 · created Apr 21, 2023 by saketh somaraju [EPAM] M18 - Release 0.21
AWS Azure GC Vulnerability Management
- Closed
- +2
- 2
updated Apr 21, 2023
Upgrade Dependencies

!60 · created Mar 31, 2023 by Abhay Joshi M18 - Release 0.21
AWS Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- 6
- Approved
updated Apr 24, 2023