Skip to content

[v2.22] CVE-2026-84375: Upgrade js-yaml and immutable JS dependencies - #856

Merged
jshaughn merged 1 commit into
kiali:v2.22from
ferhoyos:CVE-2026-84375-js-yaml-v2-22
Sep 2, 2026
Merged

jshaughn merged 1 commit into
kiali:v2.22from
ferhoyos:CVE-2026-84375-js-yaml-v2-22

Conversation

@ferhoyos

@ferhoyos ferhoyos commented Sep 2, 2026

Copy link
Copy Markdown
Collaborator

Backport of #854 to v2.22.

Made with Cursor

Co-authored-by: Cursor <cursoragent@cursor.com>
@ferhoyos
ferhoyos requested a review from jshaughn September 2, 2026 13:56
@ferhoyos ferhoyos self-assigned this Sep 2, 2026

@jshaughn jshaughn left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CVE-2026-84375 and CVE-2026-59879 fixes reviewed. js-yaml upgraded to 4.3.2, immutable to 4.3.9. Cross-branch consistency verified. CI passing.

@jshaughn
jshaughn merged commit 4422eea into kiali:v2.22 Sep 2, 2026
2 checks passed
@github-project-automation github-project-automation Bot moved this from 📋 Backlog to ✅ Done in Kiali Sprint 26-12 | Kiali v2.32 Sep 2, 2026
@ferhoyos ferhoyos moved this from ✅ Done to 👀 In review in Kiali Sprint 26-12 | Kiali v2.32 Sep 2, 2026
@jshaughn jshaughn moved this from 👀 In review to ✅ Done in Kiali Sprint 26-12 | Kiali v2.32 Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Development

Successfully merging this pull request may close these issues.

2 participants