kitos/Aegis
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deps): pin urllib3>=2.7.0 and idna>=3.15; apk upgrade in nginx stage; form-data override
Aegis CI / lint-and-test (push) Has been cancelled
Details
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Details
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Details
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Details

Browse Source
This commit is contained in:
kitos
2026-06-25 13:26:06 +02:00
parent 6e29c7081f
commit 070b402358
3 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/requirements.txt
+2
View File
@@ -9,6 +9,8 @@ bcrypt==4.0.1
boto3>=1.43.0 boto3>=1.43.0
apscheduler>=3.11.0 apscheduler>=3.11.0
requests>=2.34.2 requests>=2.34.2
urllib3>=2.7.0
idna>=3.15
pyyaml>=6.0.3 pyyaml>=6.0.3
toml>=0.10.2 toml>=0.10.2
taxii2-client>=2.3.0 taxii2-client>=2.3.0
frontend/Dockerfile
+3
View File
@@ -34,6 +34,9 @@ RUN npm run build
# ── Production Stage ─────────────────────────────────────────────────────── # ── Production Stage ───────────────────────────────────────────────────────
FROM nginx:1.31.1-alpine3.23-slim AS production FROM nginx:1.31.1-alpine3.23-slim AS production
# Patch Alpine system packages (resolves openssl CVEs in base image)
RUN apk update && apk upgrade --no-cache
# Copy built files to nginx # Copy built files to nginx
COPY --from=build /app/dist /usr/share/nginx/html COPY --from=build /app/dist /usr/share/nginx/html
frontend/package.json
+3
View File
@@ -20,6 +20,9 @@
"recharts": "^2.15.4", "recharts": "^2.15.4",
"remark-gfm": "^4.0.1" "remark-gfm": "^4.0.1"
}, },
"overrides": {
"form-data": "^4.0.6"
},
"devDependencies": { "devDependencies": {
"@tailwindcss/vite": "^4.1.18", "@tailwindcss/vite": "^4.1.18",
"@types/react": "^19.2.13", "@types/react": "^19.2.13",