[jira] [Resolved] (SPARK-51546) npm vulnerabilities

["Yang Jie (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SPARK-51546?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yang Jie resolved SPARK-51546.
------------------------------
    Fix Version/s: 4.1.0
       Resolution: Fixed

Issue resolved by pull request 50309
[https://github.com/apache/spark/pull/50309]

> npm vulnerabilities
> -------------------
>
>                 Key: SPARK-51546
>                 URL: https://issues.apache.org/jira/browse/SPARK-51546
>             Project: Spark
>          Issue Type: Improvement
>          Components: Tests
>    Affects Versions: 4.1.0
>            Reporter: Yang Jie
>            Assignee: Yang Jie
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.1.0
>
>
> run `npm audit` in  ui-test dir:
>  
> {code:java}
> # npm audit report
> @babel/helpers  <7.26.10
> Severity: moderate
> Babel has inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups - https://github.com/advisories/GHSA-968p-4wvh-cqc8
> fix available via `npm audit fix`
> node_modules/@babel/helpers
> cross-spawn  7.0.0 - 7.0.4
> Severity: high
> Regular Expression Denial of Service (ReDoS) in cross-spawn - https://github.com/advisories/GHSA-3xgq-45jj-v275
> fix available via `npm audit fix`
> node_modules/cross-spawn
> micromatch  <4.0.8
> Severity: moderate
> Regular Expression Denial of Service (ReDoS) in micromatch - https://github.com/advisories/GHSA-952p-6rrq-rcjv
> fix available via `npm audit fix`
> node_modules/micromatch
> 3 vulnerabilities (2 moderate, 1 high)
> To address all issues, run:
>   npm audit fix{code}
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org