Fix CVE-2024-4067. (opensearch-project#1074)

* Fix CVE-2024-4067. Signed-off-by: AWSHurneyt <[email protected]> * Updated release notes. Signed-off-by: AWSHurneyt <[email protected]> --------- Signed-off-by: AWSHurneyt <[email protected]> (cherry picked from commit 0a32d05) Signed-off-by: AWSHurneyt <[email protected]>
AWSHurneyt · Sep 4, 2024 · 67f9e8a · 67f9e8a
1 parent 04aaee2
commit 67f9e8a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/package.json b/package.json
@@ -62,7 +62,8 @@
     "semver": "^5.7.2",
     "**/d3-color": "^3.1.0",
     "@cypress/request": "^3.0.0",
-    "braces": "^3.0.3"
+    "braces": "^3.0.3",
+    "micromatch": "^4.0.8"
   },
   "engines": {
     "yarn": "^1.21.1"

diff --git a/release-notes/opensearch-alerting-dashboards-plugin.release-notes-2.17.0.0.md b/release-notes/opensearch-alerting-dashboards-plugin.release-notes-2.17.0.0.md
@@ -4,6 +4,7 @@ Compatible with OpenSearch Dashboards 2.17.0
 ### Maintenance
 * Increment version to 2.17.0.0 ([#1054](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1054))
 * [CVE-2024-4068] Pinned package version for braces ([#1024](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1024))
+* [CVE-2024-4067] Fix CVE-2024-4067. ([#1074](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/1074))
 
 ### Refactoring
 * support date_nanos type when select time field for creating monitor ([#954](https://github.com/opensearch-project/alerting-dashboards-plugin/pull/954))