You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hbase.apache.org by "Dávid Paksy (Jira)" <ji...@apache.org> on 2026/08/03 08:47:00 UTC

[jira] [Created] (HBASE-30310) Upgrade vulnerable website dependencies

Dávid Paksy created HBASE-30310:
-----------------------------------

             Summary: Upgrade vulnerable website dependencies
                 Key: HBASE-30310
                 URL: https://issues.apache.org/jira/browse/HBASE-30310
             Project: HBase
          Issue Type: Bug
          Components: dependabot, security, website
            Reporter: Dávid Paksy


Dependabot identified some website dependencies with known CVE-s and opened automated security update PR-s for them:

[https://github.com/apache/hbase/pulls?q=is%3Aopen+is%3Apr+author%3Aapp%2Fdependabot+label%3Ajavascript]

 

The React router CVE seems to have the biggest impact as it may require major version upgrade which probably requires more work than just change the version number.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)