[Backport 2.x] Revert to legacy discover table and add toggle to new discover table #5839
Security Report
❌ New vulnerabilities:
| CVE | Severity |  CVSS Score |
Vulnerable Library | Suggested Fix | Issue |
|---|---|---|---|---|---|
WS-2017-3772Vulnerable Source Files: ❌ /packages/osd-ui-framework/node_modules/underscore.string/unescapeHTML.js |
 High |
7.5 | juice-shopjuice-shop-14.0.0_node14_darwin_x64 | Upgrade to version: underscore.string - 3.3.5 | #4734 |
CVE-2023-26156Path to dependency file: /package.json Path to vulnerable library: /node_modules/chromedriver/package.json Dependency Hierarchy: -> ❌ chromedriver-107.0.3.tgz (Vulnerable Library) |
High |
7.5 | chromedriver-107.0.3.tgz | Upgrade to version: chromedriver - 119.0.1 | None |
CVE-2023-45857Path to dependency file: /package.json Path to vulnerable library: /node_modules/chromedriver/node_modules/axios/package.json Dependency Hierarchy: -> chromedriver-107.0.3.tgz (Root Library) -> ❌ axios-1.2.0.tgz (Vulnerable Library) |
 Medium |
6.5 | axios-1.2.0.tgz | Upgrade to version: axios - 1.6.0 | #5474 |
CVE-2023-45857Path to dependency file: /package.json Path to vulnerable library: /node_modules/axios/package.json Dependency Hierarchy: -> @osd/ui-shared-deps-1.0.0.tgz (Root Library) -> ❌ axios-0.27.2.tgz (Vulnerable Library) |
Medium |
6.5 | axios-0.27.2.tgz | Upgrade to version: axios - 1.6.0 | #5474 |
CVE-2023-26159Path to dependency file: /package.json Path to vulnerable library: /node_modules/follow-redirects/package.json Dependency Hierarchy: -> chromedriver-107.0.3.tgz (Root Library) -> axios-1.2.0.tgz -> ❌ follow-redirects-1.15.2.tgz (Vulnerable Library) |
Medium |
6.1 | follow-redirects-1.15.2.tgz | Upgrade to version: follow-redirects - 1.15.4 | #5674 |
✔️ Remediated vulnerabilities:
| CVE | Vulnerable Library |
|---|---|
| CVE-2015-9251 | jquery-1.11.1.js |
| CVE-2019-11358 | jquery-1.11.1.js |
| WS-2017-3772 | juice-shop-juice-shop-14.5.1_node16_darwin_x64 |
| CVE-2020-11022 | jquery-1.11.1.js |
| CVE-2020-11023 | jquery-1.11.1.js |
Base branch total remaining vulnerabilities: 15
Base branch commit: e13dbff94112a431eca7c4ed0713992dc747e138
Total libraries scanned: 2509
Scan token: b14cc72e5e354eb5b5f6a5d43e40b72e