database-lab-engine

database-lab-engine copied to clipboard

## CVE-2022-24778 - High Severity Vulnerability Vulnerable Library - github.com/containerd/containerd-v1.6.1 An open and reliable container runtime Dependency Hierarchy: - github.com/moby/moby-v20.10.17 (Root Library) - :x: **github.com/containerd/containerd-v1.6.1** (Vulnerable Library) Found in HEAD...

mend-bolt-for-github[bot]

## CVE-2022-24785 - High Severity Vulnerability Vulnerable Library - moment-2.29.1.tgz Parse, validate, manipulate, and display dates Library home page: https://registry.npmjs.org/moment/-/moment-2.29.1.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/node_modules/moment/package.json...

mend-bolt-for-github[bot]

## CVE-2022-27191 - High Severity Vulnerability Vulnerable Library - github.com/golang/crypto-86341886e2925764dc890ad96c141a1bc76043af [mirror] Go supplementary cryptography libraries Dependency Hierarchy: - :x: **github.com/golang/crypto-86341886e2925764dc890ad96c141a1bc76043af** (Vulnerable Library) Found in HEAD commit: b3ac62d12e3d43994ff7ad836e34da801ed665fb Found in base...

mend-bolt-for-github[bot]

## CVE-2021-33587 - High Severity Vulnerability Vulnerable Library - css-what-3.4.2.tgz a CSS selector parser Library home page: https://registry.npmjs.org/css-what/-/css-what-3.4.2.tgz Path to dependency file: /ui/package.json Path to vulnerable library: /ui/node_modules/svgo/node_modules/css-what/package.json Dependency Hierarchy:...

mend-bolt-for-github[bot]

## CVE-2022-0536 - Medium Severity Vulnerability Vulnerable Library - follow-redirects-1.14.4.tgz HTTP and HTTPS modules that follow redirects. Library home page: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.4.tgz Path to dependency file: /ui/package.json Path to vulnerable library:...

mend-bolt-for-github[bot]

## CVE-2022-0155 - Medium Severity Vulnerability Vulnerable Library - follow-redirects-1.14.4.tgz HTTP and HTTPS modules that follow redirects. Library home page: https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.4.tgz Path to dependency file: /ui/package.json Path to vulnerable library:...

mend-bolt-for-github[bot]

chore(deps): bump ejs from 3.1.6 to 3.1.8 in /ui/packages/platform

1

Bumps [ejs](https://github.com/mde/ejs) from 3.1.6 to 3.1.8. Release notes Sourced from ejs's releases. v3.1.8 Version 3.1.8 v3.1.7 Version 3.1.7 Commits 5126ff5 Version 3.1.8 7d5a1c6 Merge branch 'main' of github.com:mde/ejs into main...

dependabot[bot]

chore(deps): bump minimist from 1.2.5 to 1.2.6 in /ui/packages/platform

1

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Hey all, I am currently setting up a DLE environment for evaluation purposes. The image I try to install is _postgresai/dblab-server:3.1.0_ Following all the steps in the [documentation](https://postgres.ai/docs/tutorials/database-lab-tutorial), but can't...

eoener-tpgroup

Hi! We are working on improving access control for the Database Lab Engine. The primary focus is LDAP, Active Directory, SSO support for clones and UI/CLI connections, granular control over...

anatolystansler