Sécurité : purge des 22 CVE remontées par Trivy (premier run du gate)

Browse Source

- core : overrides BOM Spring Boot — tomcat-embed 10.1.55 (3 CRITICAL dont
  bypass d'auth digest), jackson-databind 2.21.4 (exécution de code arbitraire),
  netty 4.1.135.Final (lot DoS/bypass hostname/DNS), postgresql 42.7.11
- web : Angular 21.2.16 → 21.2.17 (HttpTransferCache, DoS formatDate,
  DOM clobbering hydration) — package-lock régénéré (peer-deps exactes
  entre paquets @angular : montée impossible paquet par paquet)

Vérifié : test-compile core, build + tests web, re-scan Trivy local propr

...

This commit is contained in:

IETM_FIXE\ietm6

2026-07-07 01:22:54 +02:00

parent 42c4b53ced

commit 177967af55

3 changed files with 875 additions and 849 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1693

web/package-lock.json generated

File diff suppressed because it is too large Load Diff