Commit d06e09f
authored
fix: cve and bump language server runtime version to 0.3.10 (#2544)
## Problem
transitive dependency `[email protected]` was introduced with #654
associated CVE link https://nvd.nist.gov/vuln/detail/CVE-2021-3807
```
(base) ➜ runtimes git:(main) npm ls registry-js
@amzn/[email protected] /Volumes/workplace/ide/language-server-runtimes
└─┬ @aws/[email protected] -> ./runtimes
└── [email protected]
(base) ➜ runtimes git:(main) npm ls ansi-regex
@amzn/[email protected] /Volumes/workplace/ide/language-server-runtimes
└─┬ @aws/[email protected] -> ./runtimes
├─┬ [email protected]
│ └─┬ [email protected]
│ └─┬ [email protected]
│ └─┬ [email protected]
│ └── [email protected]
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└── [email protected]
```
## Solution
use `winreg`
Microsoft winreg example
https://github.com/microsoft/azure-pipelines-tasks-common-packages/blob/680f186a1e10568b1493503c81d403220a2eeb22/common-npm-packages/webdeployment-common/msdeployutility.ts#L311-L320
## npm ls
```
(base) ➜ runtimes git:(security-v2) npm ls registry-js
@amzn/[email protected] /Volumes/workplace/ide/language-server-runtimes
└── (empty)
```
```
(base) ➜ runtimes git:(security-v2) npm ls ansi-regex
@amzn/[email protected] /Volumes/workplace/ide/language-server-runtimes
└─┬ @aws/[email protected] -> ./runtimes
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└─┬ [email protected]
└── [email protected]
```1 parent c168c9b commit d06e09f
File tree
42 files changed
+114
-587
lines changed- app
- aws-lsp-antlr4-runtimes
- src
- aws-lsp-buildspec-runtimes
- aws-lsp-cloudformation-runtimes
- aws-lsp-codewhisperer-runtimes
- src
- aws-lsp-identity-runtimes
- src
- aws-lsp-json-runtimes
- src
- aws-lsp-notification-runtimes
- src
- aws-lsp-s3-runtimes
- aws-lsp-yaml-json-webworker
- aws-lsp-yaml-runtimes
- src
- hello-world-lsp-runtimes
- src
- chat-client
- client/vscode
- core/aws-lsp-core
- integration-tests/q-agentic-chat-server
- server
- aws-lsp-antlr4
- aws-lsp-buildspec
- aws-lsp-cloudformation
- aws-lsp-codewhisperer
- aws-lsp-identity
- aws-lsp-json
- aws-lsp-notification
- aws-lsp-partiql
- aws-lsp-s3
- aws-lsp-yaml
- device-sso-auth-lsp
- hello-world-lsp
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
42 files changed
+114
-587
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
| 15 | + | |
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
26 | 26 | | |
27 | 27 | | |
28 | 28 | | |
29 | | - | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
Lines changed: 3 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
| 26 | + | |
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
49 | 49 | | |
50 | 50 | | |
51 | 51 | | |
52 | | - | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | 3 | | |
| 4 | + | |
4 | 5 | | |
5 | | - | |
| 6 | + | |
6 | 7 | | |
7 | | - | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
Lines changed: 5 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
| 15 | + | |
15 | 16 | | |
16 | 17 | | |
17 | 18 | | |
| |||
30 | 31 | | |
31 | 32 | | |
32 | 33 | | |
33 | | - | |
| 34 | + | |
34 | 35 | | |
35 | | - | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
0 commit comments