Skip to content

HBASE-30005 Fix 1 high (flatted), 1 moderate (ajv) CVE in website dependencies#7954

Open
PDavid wants to merge 1 commit intoapache:masterfrom
PDavid:HBASE-30005
Open

HBASE-30005 Fix 1 high (flatted), 1 moderate (ajv) CVE in website dependencies#7954
PDavid wants to merge 1 commit intoapache:masterfrom
PDavid:HBASE-30005

Conversation

@PDavid
Copy link
Contributor

@PDavid PDavid commented Mar 17, 2026

Fix:

Executed npm audit fix to fix the vulnerable dependencies.

npm audit before:

# npm audit report

ajv  <6.14.0
Severity: moderate
ajv has ReDoS when using `$data` option - https://github.com/advisories/GHSA-2g4f-4pwh-qvx6
fix available via `npm audit fix`
node_modules/ajv

flatted  <3.4.0
Severity: high
flatted vulnerable to unbounded recursion DoS in parse() revive phase - https://github.com/advisories/GHSA-25h7-pfq9-p65f
fix available via `npm audit fix`
node_modules/flatted

2 vulnerabilities (1 moderate, 1 high)

To address all issues, run:
  npm audit fix

npm audit after:

found 0 vulnerabilities

…endencies

Fix:

Executed `npm audit fix` to fix the  vulnerable dependencies.

npm audit before:

```
# npm audit report

ajv  <6.14.0
Severity: moderate
ajv has ReDoS when using `$data` option - GHSA-2g4f-4pwh-qvx6
fix available via `npm audit fix`
node_modules/ajv

flatted  <3.4.0
Severity: high
flatted vulnerable to unbounded recursion DoS in parse() revive phase - GHSA-25h7-pfq9-p65f
fix available via `npm audit fix`
node_modules/flatted

2 vulnerabilities (1 moderate, 1 high)

To address all issues, run:
  npm audit fix
```

npm audit after:

```
found 0 vulnerabilities
```
@PDavid PDavid self-assigned this Mar 17, 2026
@PDavid PDavid marked this pull request as ready for review March 17, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants