cmr-metadata-review icon indicating copy to clipboard operation
cmr-metadata-review copied to clipboard

The CMR Metadata Review tool is used to curate NASA EOSDIS collection and granule level metadata in CMR for correctness, completeness and consistency.

Results 71 cmr-metadata-review issues
Sort by recently updated
recently updated
newest added

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of...

Bumps [rdoc](https://github.com/ruby/rdoc) from 6.3.3 to 6.3.4.1. Commits cbef3cc Bump up 6.3.4.1 a5de13b Fix NoMethodError for start_with ee074e9 Bump up 6.3.4 60a6d74 Use safe_load and safe_load_file for .rdoc_options 32ff6ba Filter marshaled...

dependencies
ruby

Bumps [rails](https://github.com/rails/rails) from 6.1.7.6 to 6.1.7.7. Release notes Sourced from rails's releases. 6.1.7.7 Active Support No changes. Active Model No changes. Active Record No changes. Action View No changes. Action...

dependencies
ruby

Bumps [tar](https://github.com/isaacs/node-tar) from 6.2.0 to 6.2.1. Commits bef7b1e 6.2.1 fe8cd57 prevent extraction in excessively deep subfolders fe7ebfd remove security.md See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar&package-manager=npm_and_yarn&previous-version=6.2.0&new-version=6.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will...

dependencies
javascript

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `rubygems` dependencies of...

Bumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2. Release notes Sourced from express's releases. 4.19.2 What's Changed Improved fix for open redirect allow list bypass Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2 4.19.1 What's Changed Fix...

dependencies
javascript

Bumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4. Release notes Sourced from webpack-dev-middleware's releases. v5.3.4 5.3.4 (2024-03-20) Bug Fixes security: do not allow to read files above (#1779) (189c4ac) Changelog Sourced from...

dependencies
javascript

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.5 to 1.15.6. Commits 35a517c Release version 1.15.6 of the npm package. c4f847f Drop Proxy-Authorization across hosts. 8526b4a Use GitHub for disclosure. See full diff in compare...

dependencies
javascript

Bumps [puma](https://github.com/puma/puma) from 6.3.1 to 6.4.2. Release notes Sourced from puma's releases. 6.4.1 Bugfixes DSL#warn_if_in_single_mode - fixup when workers set via CLI (#3256) Fix idle-timeout not working in cluster mode...

dependencies
ruby