Skip to content

chore: Fix vulnerable dependencies on release-v1.23.x - #1345

Open
github-actions[bot] wants to merge 1 commit into
release-v1.23.xfrom
auto/cve/fix-release-v1.23.x
Open

chore: Fix vulnerable dependencies on release-v1.23.x#1345
github-actions[bot] wants to merge 1 commit into
release-v1.23.xfrom
auto/cve/fix-release-v1.23.x

Conversation

@github-actions

@github-actions github-actions Bot commented Sep 7, 2026 •
edited
Loading

Copy link
Copy Markdown

CVE Remediation Report

Generated: 2026-09-07T10:31:34.350Z

Release branch: release-v1.23.x

Overall status

✅ All packages remediated and verified

Summary

Package Fixed version(s) Strategy Verified
lodash 4.18.1 ✅ Already remediated ✅ Verified

Package details

1. lodash

Field Value
Fixed version(s) 4.18.1
Strategy ✅ Already remediated
Reason All 1 installed copy/copies satisfy fix versions
Action taken No changes required (already remediated)
Verification ✅ Verified
Verification detail Verified: all installed copies satisfy fixed versions (All 1 installed copy/copies satisfy fix versions)
📋 Before / after dependency evidence

Before — npm ls

pipelines-console-plugin@0.0.1 /home/runner/work/console-plugin/console-plugin
├─┬ @openshift-console/dynamic-plugin-sdk-webpack@4.22.0
│ ├─┬ @openshift/dynamic-plugin-sdk-webpack@5.3.0
│ │ └── lodash@4.18.1 deduped
│ └── lodash@4.18.1
├─┬ @openshift-console/dynamic-plugin-sdk@4.22.0
│ └── lodash@4.18.1 deduped
├─┬ @openshift/dynamic-plugin-sdk-utils@5.0.3
│ └── lodash@4.18.1 deduped
├─┬ @openshift/dynamic-plugin-sdk@8.2.0 invalid: "^4 || ^5" from node_modules/@openshift/dynamic-plugin-sdk-extensions
│ └── lodash@4.18.1 deduped
├─┬ @patternfly/react-charts@8.6.1
│ ├── lodash@4.18.1 deduped
│ ├─┬ victory-area@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-axis@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-bar@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-box-plot@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-chart@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-core@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-create-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-cursor-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-group@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-legend@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-line@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-pie@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-scatter@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-stack@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-tooltip@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-voronoi-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ └─┬ victory-zoom-container@37.3.6
│   └── lodash@4.18.1 deduped
├─┬ @patternfly/react-table@6.6.2
│ └── lodash@4.18.1 deduped
├─┬ babel-plugin-transform-imports@1.5.1
│ └─┬ babel-types@6.26.0
│   └── lodash@4.18.1 deduped
├─┬ dagre@0.8.5
│ ├─┬ graphlib@2.1.8
│ │ └── lodash@4.18.1 deduped
│ └── lodash@4.18.1 deduped
├─┬ formik@2.4.9
│ └── lodash@4.18.1 deduped
└─┬ victory@37.3.6
  ├─┬ victory-brush-container@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-brush-line@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-candlestick@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-canvas@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-errorbar@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-histogram@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-polar-axis@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-selection-container@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-shared-events@37.3.6
  │ └── lodash@4.18.1 deduped
  └─┬ victory-voronoi@37.3.6
    └── lodash@4.18.1 deduped

Before — yarn why 

├─ @openshift-console/dynamic-plugin-sdk-webpack@npm:4.22.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk-webpack@npm:4.22.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk@npm:4.22.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk@npm:4.22.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift/dynamic-plugin-sdk-utils@npm:5.0.3
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-utils@npm:5.0.3 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-webpack@npm:5.3.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-webpack@npm:5.3.0 [249a3]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0 [f357f]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-charts@npm:8.6.1
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-charts@npm:8.6.1 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-table@npm:6.6.2
│  └─ lodash@npm:4.18.1 (via npm:^4.18.1)
│
├─ @patternfly/react-table@npm:6.6.2 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.18.1)
│
├─ babel-types@npm:6.26.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.4)
│
├─ dagre@npm:0.8.5
│  └─ lodash@npm:4.18.1 (via npm:^4.17.15)
│
├─ formik@npm:2.4.9
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ formik@npm:2.4.9 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ graphlib@npm:2.1.8
│  └─ lodash@npm:4.18.1 (via npm:^4.17.15)
│
├─ victory-area@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-area@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-axis@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-axis@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-bar@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-bar@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-box-plot@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-box-plot@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-line@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-line@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-candlestick@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-candlestick@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-canvas@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-canvas@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-chart@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-chart@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-core@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ victory-core@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ victory-create-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-create-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-cursor-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-cursor-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-errorbar@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-errorbar@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-group@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-group@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-histogram@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-histogram@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-legend@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-legend@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-line@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-line@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-pie@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-pie@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-polar-axis@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-polar-axis@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-scatter@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-scatter@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-selection-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-selection-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-shared-events@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-shared-events@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-stack@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-stack@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-tooltip@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-tooltip@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-zoom-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
└─ victory-zoom-container@npm:37.3.6 [21d1b]
   └─ lodash@npm:4.18.1 (via npm:^4.17.19)

After — npm ls

pipelines-console-plugin@0.0.1 /home/runner/work/console-plugin/console-plugin
├─┬ @openshift-console/dynamic-plugin-sdk-webpack@4.22.0
│ ├─┬ @openshift/dynamic-plugin-sdk-webpack@5.3.0
│ │ └── lodash@4.18.1 deduped
│ └── lodash@4.18.1
├─┬ @openshift-console/dynamic-plugin-sdk@4.22.0
│ └── lodash@4.18.1 deduped
├─┬ @openshift/dynamic-plugin-sdk-utils@5.0.3
│ └── lodash@4.18.1 deduped
├─┬ @openshift/dynamic-plugin-sdk@8.2.0 invalid: "^4 || ^5" from node_modules/@openshift/dynamic-plugin-sdk-extensions
│ └── lodash@4.18.1 deduped
├─┬ @patternfly/react-charts@8.6.1
│ ├── lodash@4.18.1 deduped
│ ├─┬ victory-area@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-axis@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-bar@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-box-plot@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-chart@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-core@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-create-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-cursor-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-group@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-legend@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-line@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-pie@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-scatter@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-stack@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-tooltip@37.3.6
│ │ └── lodash@4.18.1 deduped
│ ├─┬ victory-voronoi-container@37.3.6
│ │ └── lodash@4.18.1 deduped
│ └─┬ victory-zoom-container@37.3.6
│   └── lodash@4.18.1 deduped
├─┬ @patternfly/react-table@6.6.2
│ └── lodash@4.18.1 deduped
├─┬ babel-plugin-transform-imports@1.5.1
│ └─┬ babel-types@6.26.0
│   └── lodash@4.18.1 deduped
├─┬ dagre@0.8.5
│ ├─┬ graphlib@2.1.8
│ │ └── lodash@4.18.1 deduped
│ └── lodash@4.18.1 deduped
├─┬ formik@2.4.9
│ └── lodash@4.18.1 deduped
└─┬ victory@37.3.6
  ├─┬ victory-brush-container@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-brush-line@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-candlestick@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-canvas@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-errorbar@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-histogram@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-polar-axis@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-selection-container@37.3.6
  │ └── lodash@4.18.1 deduped
  ├─┬ victory-shared-events@37.3.6
  │ └── lodash@4.18.1 deduped
  └─┬ victory-voronoi@37.3.6
    └── lodash@4.18.1 deduped

After — yarn why 

├─ @openshift-console/dynamic-plugin-sdk-webpack@npm:4.22.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk-webpack@npm:4.22.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk@npm:4.22.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift-console/dynamic-plugin-sdk@npm:4.22.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ @openshift/dynamic-plugin-sdk-utils@npm:5.0.3
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-utils@npm:5.0.3 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-webpack@npm:5.3.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk-webpack@npm:5.3.0 [249a3]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @openshift/dynamic-plugin-sdk@npm:8.2.0 [f357f]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-charts@npm:8.6.1
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-charts@npm:8.6.1 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.23)
│
├─ @patternfly/react-table@npm:6.6.2
│  └─ lodash@npm:4.18.1 (via npm:^4.18.1)
│
├─ @patternfly/react-table@npm:6.6.2 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.18.1)
│
├─ babel-types@npm:6.26.0
│  └─ lodash@npm:4.18.1 (via npm:^4.17.4)
│
├─ dagre@npm:0.8.5
│  └─ lodash@npm:4.18.1 (via npm:^4.17.15)
│
├─ formik@npm:2.4.9
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ formik@npm:2.4.9 [def00]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ graphlib@npm:2.1.8
│  └─ lodash@npm:4.18.1 (via npm:^4.17.15)
│
├─ victory-area@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-area@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-axis@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-axis@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-bar@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-bar@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-box-plot@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-box-plot@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-line@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-brush-line@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-candlestick@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-candlestick@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-canvas@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-canvas@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-chart@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-chart@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-core@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ victory-core@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.21)
│
├─ victory-create-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-create-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-cursor-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-cursor-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-errorbar@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-errorbar@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-group@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-group@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-histogram@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-histogram@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-legend@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-legend@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-line@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-line@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-pie@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-pie@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-polar-axis@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-polar-axis@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-scatter@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-scatter@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-selection-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-selection-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-shared-events@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-shared-events@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-stack@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-stack@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-tooltip@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-tooltip@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi-container@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-voronoi@npm:37.3.6 [21d1b]
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
├─ victory-zoom-container@npm:37.3.6
│  └─ lodash@npm:4.18.1 (via npm:^4.17.19)
│
└─ victory-zoom-container@npm:37.3.6 [21d1b]
   └─ lodash@npm:4.18.1 (via npm:^4.17.19)

Report generated by audit-report.ts. Artifacts in cve-artifacts/.

@openshift-ci

openshift-ci Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: github-actions[bot]
Once this PR has been reviewed and has the lgtm label, please assign arvindk-softwaredev for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Hi @github-actions[bot]. Thanks for your PR.

I'm waiting for a openshift-pipelines member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@github-actions
github-actions Bot force-pushed the auto/cve/fix-release-v1.23.x branch from 5312b4a to 3950dad Compare September 7, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arvindk-softwaredev arvindk-softwaredev Awaiting requested review from arvindk-softwaredev
@vdemeester vdemeester Awaiting requested review from vdemeester

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

needs-ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants