Fwd: [oVirt/openshift-status-cachet] One of your dependencies may have a security vulnerability
---------- Forwarded message ---------- From: GitHub <notifications@github.com> Date: Mon, Jan 22, 2018 at 5:48 PM Subject: [oVirt/openshift-status-cachet] One of your dependencies may have a security vulnerability To: oVirt/openshift-status-cachet < openshift-status-cachet@noreply.github.com> Cc: Security alert <security_alert@noreply.github.com> We found a potential security vulnerabilty in one of your dependencies [image: GitHub] <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBlaoUQ7ZnNSfaod-2BRPoWgKQ-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7EKBEUaeQHQP7QtZevMErZIm4pEeS4NLVfpYA2WSzrvwhwdXcwylXZNR3qLb9qrteggv09J6yFY0273so-2BN9HeGN8evNpkxlSlTzck3ScQmWLaeOWkuK6aPq-2BQ9VrOpQ7OCwPTytCGC97R4VpG-2BfVpRJsmHoulU9eu8v3Tv9UlBcaUfhaG34LB-2Byrv62uVqy7> Sign in <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBluE-2FGrtUQ7WwbM8S6nEaj0-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7LmySqSdteZJJwBXSgjTDXuzV1zZjynAfqj6vCNnfQxyM1LUZcew7iM6udfv3b6VQrlgCylBiNv1uqdB8IIYcx6O1V1Tzm9BgAYiYbjh9-2BJ-2FKtsPIz6RGZSM5yeGV3AVEduvADVEBtZZVysMzGSBrFN1-2FjojUWXcIKCU9OWCmSDYDaQoxC6FM1VRRC-2FD0sVs7> *mykaul,* We found a potential security vulnerability in a repository which you have been granted security alert access. [image: @oVirt] oVirt/openshift-status-cachet <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCi-2BzG0jazCYPBq2j-2FZVNZDeQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw76mv3CW457tgjXdmcx-2FKHSxNyK1NmFgmPENqkT-2FJW-2BxP2tdYENp-2Fa7xAZhnqY13NDFsNoReO1b1u0Z-2Be-2Fwjc65i7L4RlXTkJ0sTLb75W8ouaxXEQzR3-2Bcr8P1fEXMDJThwD1HIIzPtOmz5tumftZfgS206ebmljSavANpAP-2FysJdnXKVONe-2BMWh3nnoVF4M1x> Known * moderate severity* security vulnerability detected in jquery < 3.0.0 defined in package.json <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCid5qoaOEFaM-2BzXwzwa2MGqtRpTSLXwXDQZvqSm-2BD7zPECTjTGskK8sLtPhMtUXfNM_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7AwyAcMPuY9R2EU1-2Bd5sfvbxs0MLgmTRpRWARuhzdeQ-2FRqFvpvBz70EHaF43uyq5kqVJ7ft3irwqK3affYdfwK-2BHY2PxuLHOrhwT-2F9leAedE9Czj5Qj7b35L54Jh9rwR-2BEyPBjyGw4DU2n6m4KVRrGQXnQIvM28IjBtS3TCpYZtL-2BQPIUzecy86TdoKrOKnpF>. package.json <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCid5qoaOEFaM-2BzXwzwa2MGqtRpTSLXwXDQZvqSm-2BD7zPECTjTGskK8sLtPhMtUXfNM_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7tPXavHTpKS4XqyR2MXToHeptWA7-2BC29aMpv8X1zXV4V-2BEzNSNKibW8iofUI-2BIrKLvlgrUNc2xyUp9cYrqyVP3Yq-2BXm0Xpd4AL2DTDOQ28ENXZ-2Fv46k-2F7Gktsb3O-2ByFUOBmI-2BXBRnbatFniEh8pwwfHt6p5C8Gfk-2B-2BUdJuUm-2FW4azZUOLCCR0ikz10HBIfBgg> update suggested: jquery ~> 3.0.0. Always verify the validity and compatibility of suggestions with your codebase. Review vulnerable dependency <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCi8YlnsZCgWu-2F-2B1ur318Uv1fJJlmBk37DsJAW7RNARoxQ-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7zj8LSsj-2F31UT-2B-2FF2qXAOMLCb-2BQolndGC0FcAI0kM8pUYsi4gwFGuz97k4HKI5fG4H2Qazl31s1qR-2F2Q2xgMDJECjxkxQuiFes2lYrCvvikmCnFv1CMf4sv-2F-2Bc3tEJF80WgznHoVKENjhb3qQ-2FE7wfRg6gyAY37KPTUlntiVaA0pVZLVRZKaGDw7W7a9DK5rL> ------------------------------ Only users who have been assigned access to security alerts will receive these notifications. Unsubscribe <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBh4tM-2BvbnAt1ZCBIm0TQChRsti2oUDbPtOO7snnCj3QE6DOLgZ2oiYwpTyEZ-2B4taZVchlHxZhbyXOl29mLHqv-2Fn7FoyKjtUA-2Bw3vLpe2-2BFKqvThgoRXdIdAqPaos6PN0PQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw71jqU4SAwOsUs2JJ1-2BVjG9MDcEhd9JD6q-2Fz3D8BDgKBvuhUo84WU195RMQSxLQ5j-2BlvNQ81scVCNinXTUeBnCnxeJup1NVA0JsIQxkQFJlj0krZePJhx7NewsrQ215-2FLR3z4cbXvpL0rs38eGsNEGHqZY3hssauFGTSd-2BEfHP031rafnZY8-2BBpu4rvyBOSOAF> · Email preferences <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBlttXBNYv-2BeGM-2FMVHbSBvTrPDvaZJ5yvsxfEVwy5gWOO_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7-2FrZD8LGPGy4oHr-2FSqSMQf4KATi8urYfivQ7hdG7wqNIyJS6PLaG-2Bbtts5eCAOsDr-2BaMuQZhgsAb48xPZEB27NTS3-2BlRrqg2k9GyU-2FgC0MAYyApMr8luxJ2a-2FY81imTaynuzpjEAgZx52alDwolMHfhHCsGlUQ09FuHM3aWdv-2FqtYFM-2BQSqmECPcFi9Iewwzu> · Terms <http://sgmail.githubmail.com/wf/click?upn=H-2FQ3yMxnv4jw-2BxNnSBX80-2FAtA3t7vDbetmbWolVUHkI7aIK5sDG6eHhf6PFf2GZEMdAPO1mXdWyaS9GI2aLnBA-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7Xe-2FkEaCs7vwTVmgfp49lA7rVlWpBiIyjws3w6a1GFWBTRCW9hJMEkHFd53T0gieXm8c7ayIg4mt-2B7KIhqCBEwT5KyWyuqn1jmLxSr-2FHX3CViHpEvUFHmtH-2Fa3DFmwrrJ5sNfjEUUzU0klLwbDBobI5JPWZCwOlGeEvkx7MFpF0QS7ETyQQaW2g8xHYaVBbB1> · Privacy <http://sgmail.githubmail.com/wf/click?upn=H-2FQ3yMxnv4jw-2BxNnSBX80-2FAtA3t7vDbetmbWolVUHkKdSMxJcKXeaeoPn0qQqs-2Fw-2BqmMjx3QOoJQotJaBhy-2FxQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7daannPAT0e1-2BkTRar3P8SD9va06wcSOjzmmRVdLMhADBytJXiGcifZPEvx3AIW99661cIGznU4mBOl41mDrtKvSt3BmYfT3hKeuo2DSV4tnqSyqUWMhPRNBjzqmcW0YCiSqiItZ4Mr4jOARLWr-2FkL7whRBwYT-2FGuEuF7tTJKiTHJTrKUgCtN6PiTK9Q8yZEz> · Sign into GitHub <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBluE-2FGrtUQ7WwbM8S6nEaj0-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7RTcZPZNaCyyagzbND9VzJWEmDC0SWliuTGfLiDx6k7e597C44jB8k2kSET-2BOCeliOykMxQcm5gQYywu7pohFqCpSodt69NYoj7bz6vQbypIKfw-2BxmTvlb9cDQYAKm1XqtEc8H2RhKC1orqRZSspEZyaa37S1e-2BB61uKpdt1Q2SWkNTaqvEHGMpvDBhFJt1VE> GitHub, Inc. 88 Colin P Kelly Jr St. San Francisco, CA 94107 <https://maps.google.com/?q=88+Colin+P+Kelly+Jr+St.%0D+San+Francisco,+CA+94107&entry=gmail&source=g>
Adding Duck who seems to be the owner of the repo. On Mon, Jan 22, 2018 at 5:50 PM, Yaniv Kaul <ykaul@redhat.com> wrote:
---------- Forwarded message ---------- From: GitHub <notifications@github.com> Date: Mon, Jan 22, 2018 at 5:48 PM Subject: [oVirt/openshift-status-cachet] One of your dependencies may have a security vulnerability To: oVirt/openshift-status-cachet <openshift-status-cachet@ noreply.github.com> Cc: Security alert <security_alert@noreply.github.com>
We found a potential security vulnerabilty in one of your dependencies [image: GitHub] <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBlaoUQ7ZnNSfaod-2BRPoWgKQ-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7EKBEUaeQHQP7QtZevMErZIm4pEeS4NLVfpYA2WSzrvwhwdXcwylXZNR3qLb9qrteggv09J6yFY0273so-2BN9HeGN8evNpkxlSlTzck3ScQmWLaeOWkuK6aPq-2BQ9VrOpQ7OCwPTytCGC97R4VpG-2BfVpRJsmHoulU9eu8v3Tv9UlBcaUfhaG34LB-2Byrv62uVqy7> Sign in <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBluE-2FGrtUQ7WwbM8S6nEaj0-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7LmySqSdteZJJwBXSgjTDXuzV1zZjynAfqj6vCNnfQxyM1LUZcew7iM6udfv3b6VQrlgCylBiNv1uqdB8IIYcx6O1V1Tzm9BgAYiYbjh9-2BJ-2FKtsPIz6RGZSM5yeGV3AVEduvADVEBtZZVysMzGSBrFN1-2FjojUWXcIKCU9OWCmSDYDaQoxC6FM1VRRC-2FD0sVs7> *mykaul,*
We found a potential security vulnerability in a repository which you have been granted security alert access. [image: @oVirt] oVirt/openshift-status-cachet <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCi-2BzG0jazCYPBq2j-2FZVNZDeQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw76mv3CW457tgjXdmcx-2FKHSxNyK1NmFgmPENqkT-2FJW-2BxP2tdYENp-2Fa7xAZhnqY13NDFsNoReO1b1u0Z-2Be-2Fwjc65i7L4RlXTkJ0sTLb75W8ouaxXEQzR3-2Bcr8P1fEXMDJThwD1HIIzPtOmz5tumftZfgS206ebmljSavANpAP-2FysJdnXKVONe-2BMWh3nnoVF4M1x> Known * moderate severity* security vulnerability detected in jquery < 3.0.0 defined in package.json <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCid5qoaOEFaM-2BzXwzwa2MGqtRpTSLXwXDQZvqSm-2BD7zPECTjTGskK8sLtPhMtUXfNM_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7AwyAcMPuY9R2EU1-2Bd5sfvbxs0MLgmTRpRWARuhzdeQ-2FRqFvpvBz70EHaF43uyq5kqVJ7ft3irwqK3affYdfwK-2BHY2PxuLHOrhwT-2F9leAedE9Czj5Qj7b35L54Jh9rwR-2BEyPBjyGw4DU2n6m4KVRrGQXnQIvM28IjBtS3TCpYZtL-2BQPIUzecy86TdoKrOKnpF>.
package.json <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCid5qoaOEFaM-2BzXwzwa2MGqtRpTSLXwXDQZvqSm-2BD7zPECTjTGskK8sLtPhMtUXfNM_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7tPXavHTpKS4XqyR2MXToHeptWA7-2BC29aMpv8X1zXV4V-2BEzNSNKibW8iofUI-2BIrKLvlgrUNc2xyUp9cYrqyVP3Yq-2BXm0Xpd4AL2DTDOQ28ENXZ-2Fv46k-2F7Gktsb3O-2ByFUOBmI-2BXBRnbatFniEh8pwwfHt6p5C8Gfk-2B-2BUdJuUm-2FW4azZUOLCCR0ikz10HBIfBgg> update suggested: jquery ~> 3.0.0. Always verify the validity and compatibility of suggestions with your codebase. Review vulnerable dependency <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBsTdbr6tFZvS4r1RdSmLgtRX7AvYEQJFoWFR2JMuAkCi8YlnsZCgWu-2F-2B1ur318Uv1fJJlmBk37DsJAW7RNARoxQ-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7zj8LSsj-2F31UT-2B-2FF2qXAOMLCb-2BQolndGC0FcAI0kM8pUYsi4gwFGuz97k4HKI5fG4H2Qazl31s1qR-2F2Q2xgMDJECjxkxQuiFes2lYrCvvikmCnFv1CMf4sv-2F-2Bc3tEJF80WgznHoVKENjhb3qQ-2FE7wfRg6gyAY37KPTUlntiVaA0pVZLVRZKaGDw7W7a9DK5rL> ------------------------------
Only users who have been assigned access to security alerts will receive these notifications. Unsubscribe <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBh4tM-2BvbnAt1ZCBIm0TQChRsti2oUDbPtOO7snnCj3QE6DOLgZ2oiYwpTyEZ-2B4taZVchlHxZhbyXOl29mLHqv-2Fn7FoyKjtUA-2Bw3vLpe2-2BFKqvThgoRXdIdAqPaos6PN0PQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw71jqU4SAwOsUs2JJ1-2BVjG9MDcEhd9JD6q-2Fz3D8BDgKBvuhUo84WU195RMQSxLQ5j-2BlvNQ81scVCNinXTUeBnCnxeJup1NVA0JsIQxkQFJlj0krZePJhx7NewsrQ215-2FLR3z4cbXvpL0rs38eGsNEGHqZY3hssauFGTSd-2BEfHP031rafnZY8-2BBpu4rvyBOSOAF> · Email preferences <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBlttXBNYv-2BeGM-2FMVHbSBvTrPDvaZJ5yvsxfEVwy5gWOO_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7-2FrZD8LGPGy4oHr-2FSqSMQf4KATi8urYfivQ7hdG7wqNIyJS6PLaG-2Bbtts5eCAOsDr-2BaMuQZhgsAb48xPZEB27NTS3-2BlRrqg2k9GyU-2FgC0MAYyApMr8luxJ2a-2FY81imTaynuzpjEAgZx52alDwolMHfhHCsGlUQ09FuHM3aWdv-2FqtYFM-2BQSqmECPcFi9Iewwzu> · Terms <http://sgmail.githubmail.com/wf/click?upn=H-2FQ3yMxnv4jw-2BxNnSBX80-2FAtA3t7vDbetmbWolVUHkI7aIK5sDG6eHhf6PFf2GZEMdAPO1mXdWyaS9GI2aLnBA-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7Xe-2FkEaCs7vwTVmgfp49lA7rVlWpBiIyjws3w6a1GFWBTRCW9hJMEkHFd53T0gieXm8c7ayIg4mt-2B7KIhqCBEwT5KyWyuqn1jmLxSr-2FHX3CViHpEvUFHmtH-2Fa3DFmwrrJ5sNfjEUUzU0klLwbDBobI5JPWZCwOlGeEvkx7MFpF0QS7ETyQQaW2g8xHYaVBbB1> · Privacy <http://sgmail.githubmail.com/wf/click?upn=H-2FQ3yMxnv4jw-2BxNnSBX80-2FAtA3t7vDbetmbWolVUHkKdSMxJcKXeaeoPn0qQqs-2Fw-2BqmMjx3QOoJQotJaBhy-2FxQ-3D-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7daannPAT0e1-2BkTRar3P8SD9va06wcSOjzmmRVdLMhADBytJXiGcifZPEvx3AIW99661cIGznU4mBOl41mDrtKvSt3BmYfT3hKeuo2DSV4tnqSyqUWMhPRNBjzqmcW0YCiSqiItZ4Mr4jOARLWr-2FkL7whRBwYT-2FGuEuF7tTJKiTHJTrKUgCtN6PiTK9Q8yZEz> · Sign into GitHub <http://sgmail.githubmail.com/wf/click?upn=lYxq-2FYU7yocrdKNILYalBluE-2FGrtUQ7WwbM8S6nEaj0-3D_3MNPSO65UvAatF7RiIwz3ybXiXiTKRt5fOrXJwUnCUw8SfWkbG-2Bkt9Akea1-2Firw7RTcZPZNaCyyagzbND9VzJWEmDC0SWliuTGfLiDx6k7e597C44jB8k2kSET-2BOCeliOykMxQcm5gQYywu7pohFqCpSodt69NYoj7bz6vQbypIKfw-2BxmTvlb9cDQYAKm1XqtEc8H2RhKC1orqRZSspEZyaa37S1e-2BB61uKpdt1Q2SWkNTaqvEHGMpvDBhFJt1VE>
GitHub, Inc. 88 Colin P Kelly Jr St. San Francisco, CA 94107 <https://maps.google.com/?q=88+Colin+P+Kelly+Jr+St.%0D+San+Francisco,+CA+94107&entry=gmail&source=g>
_______________________________________________ Infra mailing list Infra@ovirt.org http://lists.ovirt.org/mailman/listinfo/infra
-- Eyal edri MANAGER RHV DevOps EMEA VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted> phone: +972-9-7692018 irc: eedri (on #tlv #rhev-dev #rhev-integ)
participants (2)
-
Eyal Edri -
Yaniv Kaul