Skip to content

Conversation

cx-itay-paz
Copy link
Contributor

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Describe the purpose of this PR along with any background information and the impacts of the proposed change.

References

Include supporting link to GitHub Issue/PR number

Testing

Describe how this change was tested. Be specific about anything not tested and reasons why. If this solution has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Checklist

  • I have added documentation for new/changed functionality in this PR (if applicable).
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used

Copy link
Contributor

github-actions bot commented Aug 5, 2025

Logo
Checkmarx One – Scan Summary & Detailscf3d45a7-7e7d-4a25-a890-6eaaefd4a3b0

New Issues (1)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
LOW Cxda14f253-4e52 Npm-bluebird-3.7.2
detailsDescription: The package `bluebird` is vulnerable to memory leak, when running the function longStackTraces() with the flag `--expose_gc`. This causes a signifi...
Attack Vector: NETWORK
Attack Complexity: HIGH

ID: lTG%2BtAwpM1gpeP5XfhGDpNI7Sb8eCmT8hbWuPh4ZyRE%3D
Vulnerable Package
Fixed Issues (9)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
CRITICAL CVE-2025-7783 Npm-form-data-4.0.0
HIGH CVE-2024-12905 Npm-tar-fs-2.1.1
HIGH CVE-2024-12905 Npm-tar-fs-1.16.3
HIGH CVE-2025-48387 Npm-tar-fs-1.16.3
HIGH CVE-2025-48387 Npm-tar-fs-2.1.1
LOW CVE-2025-54798 Npm-tmp-0.2.3
LOW CVE-2025-5889 Npm-brace-expansion-1.1.11
LOW CVE-2025-5889 Npm-brace-expansion-2.0.1
LOW Cx8bc4df28-fcf5 Npm-debug-4.3.4

@cx-itay-paz cx-itay-paz changed the title Add ignore path file to iac command Integrated ASCA, Containers, and IAC engines into IgnoreManager (UI & flow enabled for IAC only) Aug 6, 2025
@cx-itay-paz cx-itay-paz changed the title Integrated ASCA, Containers, and IAC engines into IgnoreManager (UI & flow enabled for IAC only) Integrated ASCA, Containers, and IAC engines into IgnoreManager (UI & flow enabled for IAC only) (AST-107989) Aug 6, 2025
@cx-itay-paz cx-itay-paz changed the title Integrated ASCA, Containers, and IAC engines into IgnoreManager (UI & flow enabled for IAC only) (AST-107989) Integrated ASCA, Containers, and IAC engines into IgnoreManager (UI & flow enabled for IAC-Containers-ASCA only) (AST-107989) Aug 14, 2025
@cx-itay-paz cx-itay-paz merged commit 48d33fe into main Aug 14, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants