Check logs Sprint 13.7 week 2

[jason-upchurch]

Check logs Sprint 13.7 week 2

Log review needs to be completed for sprint 13.7 week 2per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

• open tickets for Sprint 13.8 week 1 and week 2

[jason-upchurch]

FEC-CMS:

• package.json: 3
  • High: Arbitrary Code Execution ([Snyk: High] Arbitrary Code Execution in sanitize-html (due 10/9/20) fec-cms#4026)
  • Medium: Prototype Pollution ([Snyk: Medium] package.json - Prototype Pollution (due 12/06/2020) fec-cms#4105)
  • Medium: Denial of Service ([Snyk: Medium] package.json - Denial of Service (due 11/16/20) fec-cms#4043)
• requirements.txt: 0

OPEN-FEC:

• package.json: 0
• requirements.txt: 0
• data/flyway/build.gradle: 0

FEC-EREGS:

• package.json: 0
• requirements.txt: 0

FEC-PATTERN-LIBRARY:

• package.json: 0

Cloud.gov Dashboard:
9 deployer accounts, same as last week.

Offboarding:
Nothing to report