Skip to content

Fix backend vulnerabilities.#5121

Merged
devinleighsmith merged 5 commits intobcgov:devfrom
devinleighsmith:fix_vulns_backend
Dec 17, 2025
Merged

Fix backend vulnerabilities.#5121
devinleighsmith merged 5 commits intobcgov:devfrom
devinleighsmith:fix_vulns_backend

Conversation

@devinleighsmith
Copy link
Collaborator

No description provided.

Comment on lines +67 to +68
<PackageReference Include="KubernetesClient" Version="15.0.0" />
<PackageReference Include="Npgsql" Version="8.0.5" />
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

are we really using kubernetes-client and postgres in our projects?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

transitively, yes, apparently.

<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.15.0" />

<!-- Transitive dependency overrides for security vulnerabilities -->
<PackageReference Include="System.Drawing.Common" Version="8.0.11" />
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

just double-checking the usage of System.Drawing

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also transitive.

@devinleighsmith devinleighsmith changed the title Fix vulns backend Fix backend vulnerabilities. Dec 16, 2025
@github-actions
Copy link
Contributor

See CodeCov Report Here: https://app.codecov.io/github/bcgov/psp/pull/5121

@sonarqubecloud
Copy link

@devinleighsmith devinleighsmith added this pull request to the merge queue Dec 17, 2025
Merged via the queue into bcgov:dev with commit 17b9977 Dec 17, 2025
18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants