Skip to content
This repository was archived by the owner on Aug 8, 2024. It is now read-only.

Update to Drupal 9.5.5. For more information, see https://www.drupal.org/project/drupal/releases/9.5.5 - #426

Closed
pantheon-upstream wants to merge 1 commit into
default-9.xfrom
update-9.5.5
Closed

Update to Drupal 9.5.5. For more information, see https://www.drupal.org/project/drupal/releases/9.5.5#426
pantheon-upstream wants to merge 1 commit into
default-9.xfrom
update-9.5.5

Conversation

@pantheon-upstream

Copy link
Copy Markdown

Update from Drupal 9.1.0 to Drupal 9.5.5.

This is experimental. Do not merge.

@guardrails

guardrails Bot commented Mar 15, 2023

Copy link
Copy Markdown

⚠️ We detected 10 security issues in this pull request:

Hard-Coded Secrets (1)
Docs Details
💡 Title: Secret Keyword, Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/modules/user/config/install/user.mail.yml#L34

More info on how to fix Hard-Coded Secrets in General.


Insecure Use of Regular Expressions (7)
Docs Details
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/misc/position.es6.js#L30
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/misc/position.js#L13
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/scripts/js/ckeditor5-types-documentation.js#L30
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/scripts/js/vendor-update.js#L34
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/misc/position.es6.js#L38
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/misc/position.es6.js#L40
💡 Title: Regex DOS (ReDOS), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/misc/position.js#L18

More info on how to fix Insecure Use of Regular Expressions in JavaScript.


Information Disclosure (1)
Docs Details
💡 Title: Use of phpinfo(), Severity: Medium
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/core/modules/system/src/Controller/SystemInfoController.php#L62

More info on how to fix Information Disclosure in PHP.


Insecure Processing of Data (1)
Docs Details
💡 Title: Insecure HTTP redirect, Severity: Low
https://github.com/pantheon-systems/drops-8/blob/96b4f854fa68ff845ff590fd1fde840989502da7/.ht.router.php#L29

More info on how to fix Insecure Processing of Data in PHP.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@pantheon-upstream

Copy link
Copy Markdown
Author

Superseeded by #427.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant