tulibraries / tul_cob

86%

main: 86%

LAST BUILD ON BRANCH CVE-2021-44906_and_CVE_2020-7598_waiver

branch: CVE-2021-44906_and_CVE_2020-7598_waiver

CHANGE BRANCH

x

Reset

• CVE-2021-44906_and_CVE_2020-7598_waiver
• main
• BL-1829-update-digital-collections-results-on-bento-page-ENGINE
• add-documentation-Documentation/Ruby-CVE-2024-26143
• fix-build-fails-security-check
• fix-security-issue
• BL-1840-web-concurrency-env-var
• BL-1845-cache-static-files
• revert-4244-BL-1848-cache-stuff
• BL-1849-Cache_libkey_articles_query
• BL-1842-lazy-load-social-media-icons
• BL-1846-add-aspect-ratio-to-temple-logo-image
• BL-1844-review-loading-of-font-awesome-font
• BL-1843-several-fonts-are-loaded-with-settings-that-hide-text-while-they-are-loading
• solr-update
• BL-1833-label
• BL-1841-fix-broken-prod-deployment
• request
• BL-1823-Extend_Primo_Central_timeout
• update-ruby-version
• update-node-package
• BL-1836-try-ruby-3.2
• revert-4201-dependabot/bundler/mysql2-0.5.6
• remove-jemalloc-stats-print
• fix-docker-lint-issue-2
• enable-yjit-ruby
• update-skylight-and-ruby-3.2
• test-1.22.1
• tzdata-update
• update-apk-package
• Update_package_dependencies
• chin_tulcob_dependabot
• DEVO-387-remove-linode-qa-integration
• BL-1828-ris-articles
• devo-937-use-env-variable-for-helm-version
• solr-update-20231212
• alpine-version-docker-build
• update-solr
• sensei100-patch-1
• BL-684_add_better_logging_output_to_the_alma_and_primo_gems
• BL-1805-display-avail-status-for-all-items
• adv-lang
• fix-lock-file
• Rollback_faraday-2.7.12_upgrade
• BL-1822-article-creator-bug
• use-penn-chrome-config
• pin-selenium-webdriver-again
• use-ruby-3.1-alpine-image-in-ci
• BL-1818-js-loans
• BL-1818-form-js
• BL-1818-js-files
• solr-update-202311
• BL-1784-update-airflow-variable-on-deploy
• BL-1817-system-view-components
• BL-1808-Diaagmose_invalid_session-id_in_CircleCI
• BL-1821-remove-unused-code
• BL-1815-reorganize-helper-methods
• BL-1820-getting-started
• BL-1815-reorganize-helpers
• BL-943-bookmarks-note
• BL-1654
• replace-babel-preset-es2015-with-preset-env
• BL-1815-delete-unused-helper-methods
• BL-1816-Remove_unused_blacklight-nav-_saved_searches_partial
• BL-1816-Remove_unused_on_only_partial
• DEVO-835-remove-version-qa-deploy
• devo-893-use-build-scan
• bl-1814-fix-url_query-method
• upgrade-yarn-deps
• update-docker-deps
• revert-4002-BL-1813-temp-add-libproxy
• DEVO-809-update-orbs-for-circle-ci
• update-selenium-webdriver-gem
• BL-1811-update-manifold-alerts
• update-to-new-cluster
• BL-1809-creator-null-value
• update-selenium-webdriver
• use-older-ffi-version
• revert-ffi-version
• update-change-in-selenium-webdriver
• DEVO-849-sast-dast-scanning
• update-solr-collections
• update-helm-chart-version
• update-rails-to-6.1.7.6
• update-gemfile-lock
• docker-package-updates
• update-nodejs-package
• DEVO-825-new-security-scan
• update-link
• related-items-text
• solrcollection202308
• more-package-updates
• update-build-packages
• BL-1782-add-new-gtm-code-snippets
• BL-1777-ezborrow
• update-docker-packages
• BL-1771-article-display
• update-rails-security-fix
• mariadb_update
• DEVO-807-update-skylight-version
• update-prod-chart
• DEVO-805-add-session-store-dependancy
• DEVO-805-use-memache-session-store
• update-packages
• DEVO-803-update-harbor-repo
• update-chart-version
• devo-791-fix-ssl-issue
• devo-791-update-header
• BL-1829-update-digital-collections-results-on-bento-page
• cdm-engine-restricted-collections
• BL-1834-Reformat_message
• revert-cache-action-index-update
• solr202403
• hot-fix-v1.25.2.1
• primo-api-updates
• primo-api-updates-2
• hot-fix-v1.25.2.2
• hot-fix-v1.25.2.3
• update-for-primo-api-changes
• fix-directlinks
• BL-1834-Fix_html_redering_in_email
• citationlinker
• citationlinker-pt2
• BL-1834-emails
• more-resource-types
• directlink-nil
• fix-resource-type
• BL-1852-cdm-bug
• BL-1829-queryno
• update-rubocop
• dependabot/bundler/cob_index-1080d03
• dependabot/bundler/honeybadger-5.7.0
• BL-1854-article-facets
• cdi-language
• dependabot/bundler/cob_index-f4944a8
• BL-1829-collection
• BL-1852
• cdm-collection
• security-update-packages
• make-cdm-search-engine-faster
• honeybadger-fix
• dependabot/bundler/cob_az_index-395d2aa
• remove-preload-tag
• blacklight-7.37.0
• cdm-timeout
• solrupdate202404
• DEVO-1038-update-cluster-variables
• dependabot/bundler/lc_solr_sortable-b106d4e
• dependabot/bundler/nokogiri-1.16.4
• update-helm-chart-location
• dependabot/bundler/spring-4.2.1
• dependabot/bundler/cob_az_index-544e422
• dependabot/bundler/cob_az_index-e99cfb0
• postgres-dependency-update
• dependabot/submodules/solr/configs/tul_cob-catalog-solr-312058c
• dependabot/bundler/cob_index-10f2b4e
• solrupdate202405
• BL-1863-Remove_request_form_notes_section
• BL-1867-Update_Close_Button_for_How_to_Get_This_modal
• update-docker-package
• BL-1873-remove-partial
• BL-1873-pagination-component
• BL-1871-component-prep
• fix-gitlab-pipeline
• request-refactor
• BL-1848-cache-stuff-part-2
• dependabot/bundler/rubocop-rails-2.25.0
• dependabot/bundler/primo-a204923
• revert-rails-7-upgrade
• revert-rails-upgrade
• BL-1872-document-view-components
• BL-1873-fix-spacing-issue
• Update_package_dependencies-2024-05-23
• BL-1875-view-components-general-elements
• BL-1872-fix-google-preview
• BL-1873-fix-spacing-issues
• BL-1863-Revert_changes_to_booking_and_digitization_forms
• BL-1867-Use_default_close_button
• BL-1866-item-requests
• request-troubleshooting
• modal-componenet
• BL-1870-Move_availability_helper_methods_to_methods_amd_modules
• BL-1774-upgrade-to-rails-7
• update-git-package
• keybase-update
• citations-https
• dependabot/bundler/cob_index-44bc4e5
• solrupdate-202406
• dependabot/bundler/honeybadger-5.11.1
• BL-1880-purchase-order
• fix-security-issue-CVE-2024-4068
• revert-caching-work-0dfd44
• BL-1881-fines
• BL-1879-required-form
• dependabot/bundler/honeybadger-5.12.0
• BL-1882-booking-error
• dependabot/npm_and_yarn/ws-7.5.10
• BL-1806-More_files_to_review
• availability-helper
• BL-1883-Display_all_published_library_website_alert_messages
• availability-refactoring
• dependabot/bundler/faraday-2.10.0
• BL-1806-Fix_syntax_error
• BL-1885-semgrep-sast-part-1
• BL-1806-Temporarily_allow_all_catalog_controller_params
• dependabot/bundler/cob_index-16d56f5
• Update_package_dependencies-2024-07-15
• BL-1864-request
• solrupdate-202407
• dependabot/bundler/honeybadger-5.15.1
• update-solr-url
• fix-request-message
• add-exclude-path
• update-az-web-solr-collections
• reset-solr-urls
• dependabot/submodules/solr/configs/tul_cob-az-solr-f2e4e7b
• dependabot/submodules/solr/configs/tul_cob-web-solr-e3f23a3
• BL-1887-ambler
• test-rocky-solrcloud
• use-rocky-host
• BL-1865-fix
• BL-1887-ambler-js
• sanitize-user-input
• BL-1870-fix-array-coparison-fails
• temporarily-exclude-semgrep-analyzer
• update-solr-host-to-rocky-solr
• dependabot/submodules/solr/configs/tul_cob-az-solr-f3eeb05
• dependabot/bundler/honeybadger-5.15.5
• dependabot/bundler/cob_web_index-e69b229
• update-web-collection
• devo-1105-fix-update-catalog-on-deployment
• use-new-solrcloud-host
• dependabot/bundler/cob_index-1074892
• request-rapid-access
• dependabot/bundler/rspec-rails-6.1.4
• dependabot/bundler/honeybadger-5.15.6
• dependabot/bundler/blacklight-marc-8.1.4
• dependabot/bundler/primo-696510e
• micromatch-documentation
• add-ai-specific-disallows
• solrupdate202408
• BL-1866-followup
• BL-1870-availability
• BL-1890-equipment
• BL-1870-fix
• dependabot/bundler/rubocop-1.66.0
• dependabot/bundler/rspec-rails-6.1.5
• BL-1878-add-clear-caches-endpoint
• dependabot/bundler/cob_web_index-e05d071
• dependabot/submodules/solr/configs/tul_cob-az-solr-6cd9335
• BL-1890-fix
• qa-solrupdate-202409
• BL-1899-cie
• update-tzdata-package
• BL-1902-refactor-url-error
• BL-1898-fix-honeybadger-error
• Waive_new_CVE_until_remediated
• dependabot/bundler/lc_solr_sortable-a85026d
• BL-1904-fix-redirect-error
• BL-1878-fix-delete-caches
• Update_yarn_packages
• BL-1773-upgrade-bootstrap-from-4-to-5
• update-minimist
• BL-1878-delete-cached-pages
• cob_index-13ba19e-to-4c2111a
• dependabot/bundler/rubocop-rails-2.26.2
• BL-1903-Increase_Primo_timeout_time
• bootstrap-updates
• BL-1915-remove-underscore-from-links
• BL-1911-ignore-some-exceptions
• BL-1914-borders-less-visible-in-everything-page
• BL-1919-fix-multi-subject-links-when-hovered-over
• BL-1909-article-date-sort
• dependabot/bundler/primo-73bf557
• dependabot/submodules/solr/configs/tul_cob-catalog-solr-ef22362
• BL-1911-try-ignoring-by-regex
• update-circleci-cache
• CVE-2024-47764-Update_cookies_package
• solrupdate-202410
• bs5-dropdowns
• BL-1921-staff-view-back-to-main-view-link
• dependabot/bundler/ruby-prof-1.7.1
• dependabot/npm_and_yarn/http-proxy-middleware-2.0.7
• update-rails-for-security-patch
• dependabot/bundler/rubocop-1.68.0
• CVE-2024-49761-Waiver
• BL-1923-refactor-quik-pay-log-output
• BL-1925-bug-histogram-not-displaying-in-publication-date-facet

Build # ae3aeccd-8234-4f48-9c9b-40ae2858c45b

Build Type

push

circleci

Committed by nomadicoder

Commit Message

Waiver for newly caught CVE-2020-7598 and CVE-2021-44906

- Though these are old CVEs, they were just caught for the
Minimist package. We await updates to the package.

Run Details

3059 of 3555 relevant lines covered (86.05%)

63.76 hits per line