You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@seata.apache.org by "slievrly (via GitHub)" <gi...@apache.org> on 2025/08/27 02:45:14 UTC

[I] Upgrade sha.js to fix 1 Dependabot alert in console/src/main/resources/static/console-fe/package-lock.json [incubator-seata]

slievrly opened a new issue, #7602:
URL: https://github.com/apache/incubator-seata/issues/7602

   ### Check Ahead
   
   - [x] I have searched the [issues](https://github.com/seata/seata/issues) of this repository and believe that this is not a duplicate.
   
   - [ ] I am willing to try to fix this bug myself.
   
   
   ### Ⅰ. Issue Description
   
   CVE-2025-9288
   
   Upgrade sha.js to version 2.4.12 or later. For example:
   
   "dependencies": {
     "sha.js": ">=2.4.12"
   }
   "devDependencies": {
     "sha.js": ">=2.4.12"
   }
   
   ### Ⅱ. Describe what happened
   
   _No response_
   
   ### Ⅲ. Describe what you expected to happen
   
   _No response_
   
   ### Ⅳ. How to reproduce it (as minimally and precisely as possible)
   
   _No response_
   
   ### Ⅴ. Anything else we need to know?
   
   _No response_
   
   ### Ⅵ. Environment
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org

Re: [I] Upgrade sha.js to fix 1 Dependabot alert in console/src/main/resources/static/console-fe/package-lock.json [incubator-seata]

Posted by "YoWuwuuuw (via GitHub)" <gi...@apache.org>.
YoWuwuuuw commented on issue #7602:
URL: https://github.com/apache/incubator-seata/issues/7602#issuecomment-3273766909

   Hi, I made a try.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org

Re: [I] Upgrade sha.js to fix 1 Dependabot alert in console/src/main/resources/static/console-fe/package-lock.json [incubator-seata]

Posted by "xingfudeshi (via GitHub)" <gi...@apache.org>.
xingfudeshi closed issue #7602: Upgrade sha.js to fix 1 Dependabot alert in console/src/main/resources/static/console-fe/package-lock.json
URL: https://github.com/apache/incubator-seata/issues/7602


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@seata.apache.org
For additional commands, e-mail: notifications-help@seata.apache.org