Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #39674 Ignore node-gettext CVE-2024-21528
    Actions
    Infos
    #39674
    Thomas Gerbet (tgerbet)
    2024-09-13 10:05
    2024-09-12 16:15
    41301
    Details
    Ignore node-gettext CVE-2024-21528

    Advisory: https://security.snyk.io/vuln/SNYK-JS-NODEGETTEXT-6100943

    We are not impacted in our context but there are no fixed version. We probably should integrate the part of node-gettext we need into @tuleap/gettext as it is appears to be abandoned upstream.

    Empty
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-09-13
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #37898 Tuleap Releases 16.0 Delivered 2024-10-09 15:47 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #39674

    Git commit

    tuleap/tuleap/stable

    chore: request #39674 Ignore node-gettext CVE-2024-21528 1c68575d82
    User avatar Thomas Gerbet (tgerbet) , 2024-09-12 16:18
    Merge commit 'refs/changes/05/31905/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 88a87265cd
    User avatar Nicolas Terray (nterray) , 2024-09-13 10:04
    Referenced by request #39674

    Artifact Tracker v5

    rel #37898 16.0

    Other

    gerrit #31905
    Display settings

    Follow-ups