Check logs Sprint 25.1 Week 1

[cnlucas]

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

Ref: #5797

• Check booting workers
• Check memory usage
  (Note: Copy above links in a browser to view the metrics)

[pkfec]

Following vulnerabilities are flagged using snyk cli and not from synk dashboard. More on snyk dashboard discrepancies on slack thread here :

FEC-CMS: 5
package.json: 2
[Snyk High - es5-ext Regular Expression Denial of Service (ReDoS)] (fecgov/fec-cms#6132)
[Snyk Medium dompurify Template Injection] (fecgov/fec-cms#6206)

requirements.txt: 3
[Snyk Medium - [email protected] Regular Expression Denial of Service (ReDoS)] (fecgov/fec-cms#6268)
[Snyk Medium - [email protected] Cross-site Scripting (XSS)] (fecgov/fec-cms#6250)
[Snyk Medium - [email protected] Regular Expression Denial of Service (ReDoS)] (fecgov/fec-cms#6269)

openFEC: 1
flyway: 0
package.json: 0
requirements.txt: 0
requirements-dev.txt: 1
[Snyk Low] - Log Injection in [email protected]

FEC-EREGS: Pausing the vulnerability checks on this repo. This repo will be deprecated soon!

FEC-PATTERN-LIBRARY: None
package.json: 0

Search logs:
Kibana logs timed out when searched for "User change" in past 7 days or 30 days
Deployer account from cloud.gov dashboard: 10