ietm64/LoreMind
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sécurité : purge des 22 CVE remontées par Trivy (premier run du gate)
Some checks failed
Build & Push Images / build (web) (push) Successful in 1m58s
Details
Build & Push Images / build (core) (push) Successful in 3m13s
Details
Build & Push Images / build-switcher (push) Successful in 22s
Details
Qualité & Sécurité / Web (ESLint · angular-eslint + sonarjs) (push) Successful in 43s
Details
Qualité & Sécurité / MegaLinter (PMD · Ruff · Bandit · gitleaks · hadolint) (push) Successful in 1m0s
Details
Build & Push Images / build (brain) (push) Successful in 1m12s
Details
Qualité & Sécurité / Trivy (CVE dépendances Maven / pip / npm) (push) Failing after 2m35s
Details

Browse Source 
- core : overrides BOM Spring Boot — tomcat-embed 10.1.55 (3 CRITICAL dont
  bypass d'auth digest), jackson-databind 2.21.4 (exécution de code arbitraire),
  netty 4.1.135.Final (lot DoS/bypass hostname/DNS), postgresql 42.7.11
- web : Angular 21.2.16 → 21.2.17 (HttpTransferCache, DoS formatDate,
  DOM clobbering hydration) — package-lock régénéré (peer-deps exactes
  entre paquets @angular : montée impossible paquet par paquet)

Vérifié : test-compile core, build + tests web, re-scan Trivy local propr
This commit is contained in:
IETM_FIXE\ietm6
2026-07-07 01:22:54 +02:00
parent 42c4b53ced
commit 177967af55
3 changed files with 875 additions and 849 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1693
web/package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

18
web/package.json
View File

@@ -20,15 +20,15 @@
},
"private": true,
"dependencies": {
"@angular/animations": "^21.2.16",
"@angular/animations": "^21.2.17",
"@angular/cdk": "^21.2.14",
"@angular/common": "^21.2.16",
"@angular/compiler": "^21.2.16",
"@angular/core": "^21.2.16",
"@angular/forms": "^21.2.16",
"@angular/platform-browser": "^21.2.16",
"@angular/platform-browser-dynamic": "^21.2.16",
"@angular/router": "^21.2.16",
"@angular/common": "^21.2.17",
"@angular/compiler": "^21.2.17",
"@angular/core": "^21.2.17",
"@angular/forms": "^21.2.17",
"@angular/platform-browser": "^21.2.17",
"@angular/platform-browser-dynamic": "^21.2.17",
"@angular/router": "^21.2.17",
"@ngx-translate/core": "^18.0.0",
"@ngx-translate/http-loader": "^18.0.0",
"dompurify": "^3.4.1",
@@ -41,7 +41,7 @@
"devDependencies": {
"@angular-devkit/build-angular": "^21.2.14",
"@angular/cli": "^21.2.14",
"@angular/compiler-cli": "^21.2.16",
"@angular/compiler-cli": "^21.2.17",
"@emnapi/core": "^1.11.0",
"@emnapi/runtime": "^1.11.0",
"@eslint/js": "^10.0.1",