Skip to content

VULN-109557: fix: remediate vulnerable dependencies in splunk-example-ta - #46

Merged
Sukupate merged 1 commit into
mainfrom
fix/vulns-splunk-example-ta-batch-20260825
Aug 27, 2026
Merged

Sukupate merged 1 commit into
mainfrom
fix/vulns-splunk-example-ta-batch-20260825

Conversation

@Sukupate

@Sukupate Sukupate commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Summary

Regenerates the UI npm lockfile so the remaining vulnerable transitive dependencies resolve to safe versions. The lockfile continues to use public registry.npmjs.org package URLs.

Remediated by this PR

Ticket Dependency Vulnerable Resolved
VULN-109557 storybook 8.5.7 8.6.18
VULN-109570 tmp 0.2.3 0.2.7
VULN-109578 uuid 11.0.5 11.1.1
VULN-109584 ws 6.2.3 6.2.6
VULN-109586 ws 7.5.10 7.5.13
VULN-109587 ws 8.18.0 8.21.3

Files changed

  • ui/package-lock.json

Validation

  • npm ci --registry=https://registry.npmjs.org
  • npm run lint
  • npm test -- --runInBand — 3 suites and 4 tests passed
  • npm run build — completed successfully with size warnings only
  • Lockfile verification — 1,473 public registry entries and no internal Artifactory URLs

Remediates VULN-109557, VULN-109570, VULN-109578, VULN-109584, VULN-109586, and VULN-109587 by regenerating the npm lockfile with safe Storybook, tmp, uuid, and ws versions.
@Sukupate
Sukupate merged commit 4c4674e into main Aug 27, 2026
12 checks passed
@Sukupate
Sukupate deleted the fix/vulns-splunk-example-ta-batch-20260825 branch August 27, 2026 08:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants