Skip to main content

Tuleap 16 est là ! Assistez à l'événement virtuel le 17 octobre à 10h30. Inscrivez-vous ici !

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #39674 Ignore node-gettext CVE-2024-21528
    Actions
    Infos
    #39674
    Thomas Gerbet (tgerbet)
    2024-09-13 10:05
    2024-09-12 16:15
    41288
    Details
    Ignore node-gettext CVE-2024-21528

    Advisory: https://security.snyk.io/vuln/SNYK-JS-NODEGETTEXT-6100943

    We are not impacted in our context but there are no fixed version. We probably should integrate the part of node-gettext we need into @tuleap/gettext as it is appears to be abandoned upstream.

    Empty
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-09-13
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #37898 Tuleap Releases 16.0 Under development 2024-09-19 15:40 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #39674

    Git commit

    tuleap/tuleap/stable

    chore: request #39674 Ignore node-gettext CVE-2024-21528 1c68575d82
    User avatar Thomas Gerbet (tgerbet) , 2024-09-12 16:18
    Merge commit 'refs/changes/05/31905/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD 88a87265cd
    User avatar Nicolas Terray (nterray) , 2024-09-13 10:04
    Referenced by request #39674

    Artifact Tracker v5

    rel #37898 16.0

    Other

    gerrit #31905
    Display settings

    Follow-ups