Skip to content

qdrant/1.11.1 package update - #27153

Merged
philroche merged 1 commit into
mainfrom
wolfictl-ab880ebb-fd83-4fc4-8c98-f2e40de11647
Aug 27, 2024
Merged

qdrant/1.11.1 package update#27153
philroche merged 1 commit into
mainfrom
wolfictl-ab880ebb-fd83-4fc4-8c98-f2e40de11647

Conversation

@octo-sts

@octo-sts octo-sts Bot commented Aug 27, 2024

Copy link
Copy Markdown
Contributor

@wolfi-bot
qdrant/1.11.1 package update
8f99638 
Signed-off-by: wolfi-bot <121097084+wolfi-bot@users.noreply.github.com>
@octo-sts octo-sts Bot added request-version-update request for a newer version of a package automated pr P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. labels Aug 27, 2024
@github-actions

github-actions Bot commented Aug 27, 2024

Copy link
Copy Markdown
Contributor
Package qdrant-oci-entrypoint: Click to expand/collapse

Package qdrant-oci-entrypoint:
Unchanged

Package qdrant-oci-compat: Click to expand/collapse

Package qdrant-oci-compat:
Unchanged

Package qdrant: Click to expand/collapse

Package qdrant:
Added: /usr/lib/qdrant/static/assets/cssMode-759f92ca.js
Added: /usr/lib/qdrant/static/assets/freemarker2-72f9d1cf.js
Added: /usr/lib/qdrant/static/assets/handlebars-71def87f.js
Added: /usr/lib/qdrant/static/assets/html-666cc108.js
Added: /usr/lib/qdrant/static/assets/htmlMode-d8ab5655.js
Added: /usr/lib/qdrant/static/assets/index-c6c85a7c.js
Added: /usr/lib/qdrant/static/assets/javascript-455badd0.js
Added: /usr/lib/qdrant/static/assets/jsonMode-4941587d.js
Added: /usr/lib/qdrant/static/assets/liquid-ea2f77e3.js
Added: /usr/lib/qdrant/static/assets/mdx-883178d1.js
Added: /usr/lib/qdrant/static/assets/python-1f0ea2d8.js
Added: /usr/lib/qdrant/static/assets/razor-3d43412c.js
Added: /usr/lib/qdrant/static/assets/tsMode-e8e41b42.js
Added: /usr/lib/qdrant/static/assets/typescript-f19f45df.js
Added: /usr/lib/qdrant/static/assets/worker-39c22122.js
Added: /usr/lib/qdrant/static/assets/xml-d7030374.js
Added: /usr/lib/qdrant/static/assets/yaml-214e621a.js
Modified: /usr/bin/qdrant
Modified: /usr/lib/qdrant/static/index.html
Modified: /usr/lib/qdrant/static/openapi.json
Deleted: /usr/lib/qdrant/static/assets/cssMode-5815b808.js
Deleted: /usr/lib/qdrant/static/assets/freemarker2-531aa792.js
Deleted: /usr/lib/qdrant/static/assets/handlebars-f674de6f.js
Deleted: /usr/lib/qdrant/static/assets/html-4b805df6.js
Deleted: /usr/lib/qdrant/static/assets/htmlMode-73f75842.js
Deleted: /usr/lib/qdrant/static/assets/index-46f1b86b.js
Deleted: /usr/lib/qdrant/static/assets/javascript-646404ac.js
Deleted: /usr/lib/qdrant/static/assets/jsonMode-0a4866de.js
Deleted: /usr/lib/qdrant/static/assets/liquid-8e7adf27.js
Deleted: /usr/lib/qdrant/static/assets/mdx-14720aaa.js
Deleted: /usr/lib/qdrant/static/assets/python-324849f7.js
Deleted: /usr/lib/qdrant/static/assets/razor-32633aff.js
Deleted: /usr/lib/qdrant/static/assets/tsMode-cc8e135c.js
Deleted: /usr/lib/qdrant/static/assets/typescript-60df28b6.js
Deleted: /usr/lib/qdrant/static/assets/worker-04da1bf4.js
Deleted: /usr/lib/qdrant/static/assets/xml-a04fc916.js
Deleted: /usr/lib/qdrant/static/assets/yaml-297bf97f.js

bincapz found differences: Click to expand/collapse

Deleted: qdrant/usr/lib/qdrant/static/assets/handlebars-f674de6f.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/html-4b805df6.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/htmlMode-73f75842.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/mdx-14720aaa.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/xml-a04fc916.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/yaml-297bf97f.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/typescript-60df28b6.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant-oci-compat/var/lib/db/sbom/qdrant-oci-compat-1.11.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/8b58ec96ad64146670f1addce73e

Deleted: qdrant/usr/lib/qdrant/static/assets/cssMode-5815b808.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/python-324849f7.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/index-46f1b86b.js [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM 3P/threat_hunting/metasploit references 'metasploit' tool, by mthcht Set payload
-MEDIUM combo/stealer/browser Uses HTTP, archives, and references multiple browsers .config
Chrome
Firefox
POST
Safari
https
tar
zip
-MEDIUM databases/mysql accesses MySQL databases mysql
-MEDIUM exec/cmd executes a command _innerExecuteCommands
_onDidExecuteCommand
_onWillExecuteCommand
_runEditorCommand
execCommand:
executeCmd
executeCommands
runCommand
runDOMCommand
-MEDIUM kernel/platform get system identification process.arch
process.platform
-MEDIUM net/download download files Cancel download
DOWNLOAD_URL
Download as CSV
Download as Excel
Download canceled
Download snapshot
DownloadURL
Preparing download
abortDownload
async downloadSnapshot
cloud-download
cloudDownload
desktop-download
desktopDownload
downloadResource
onDownloadProgress
the previous download is finished
the snapshot to download
-MEDIUM net/fetch Invokes curl curl -L -X POST
curl -L -X PUT
curl -X PUT
-MEDIUM net/http/form/upload upload content via HTTP form POST
application/x-www-form-urlencoded
-MEDIUM net/http/post submit content to websites POST
http
-MEDIUM net/upload uploads files UPLOADING
UploadAllowed
UploadBatches
UploadButton
UploadFileTypes
UploadInProgress
UploadProgress
UploadStarted
UploadUrl
UploadX
UploadedBytes
UploadedOfTotal
UploadedSize
UploadedSnapshot
Uploader
Uploading
Uploads
uploadBundle
uploadComplete
uploadFailed
uploadFiles
uploadID
uploadNewlyAdded
uploadProgress
uploadRemoteFile
uploadStalled
uploadStartedFiles
uploadState
uploadURL
uploadXFiles
uploadXNewFiles
uploaded_snapshot
uploaderEvents
uploaders
uploading
uploads
-MEDIUM net/url/encode encodes URL, likely to pass GET variables urlencode
-MEDIUM net/websocket supports web sockets WebSocket
-MEDIUM ref/extensions/office References multiple Office file extensions (possible exfil) docm
docx
ppt
pst
xlsx
-MEDIUM ref/program/powershell powershell powershell-b433b622
-MEDIUM ref/words/intercept References interception interceptors
-MEDIUM techniques/code_eval evaluate code dynamically using exec() exec("")
exec(b)
exec(b,b
exec(b,y)
exec(d)
exec(e))
exec(e),r
exec(e,l,a)
exec(e,n,o)
exec(e,s,r)
exec(f)
exec(g)
exec(he)))
exec(i))
exec(i),a
exec(lt),ue
exec(n)
exec(o),a
exec(o),s
exec(p)
exec(r)
exec(s))
exec(this
exec(u
exec(v)
-LOW compression/gzip works with gzip files gzip
-LOW encoding/base64 Supports base64 encoded strings base64
-LOW encoding/json/decode Decodes JSON messages JSON.parse
-LOW encoding/json/encode encodes JSON JSON.stringify
-LOW env/get Retrieve environment variable values env.BUILD
env.SNAP
env.VSCODE
-LOW fd/read reads from a file handle _source.read()
e).read()
i.read()
o.read()
reader.read()
tokenizer.read()
-LOW fs/link/create May create hard file links _link
-LOW fs/mount mounts file systems -o
mount
-LOW net/http/accept/encoding set HTTP response encoding format (example: gzip) Accept-Encoding
-LOW net/http/request makes HTTP requests User-Agent
-LOW net/socket/listen listen on a socket accept
listen
socket
-LOW net/socket/send send a message to a socket _send
-LOW ref/path/hidden possible hidden file path /jsdom/.test
/node_modules/.pnpm
-LOW ref/site/url contains embedded HTTPS URLs https://api.qdrant.tech/api-reference/
https://bugs.webkit.org/show_bug.cgi?id=68196
https://cdn.jsdelivr.net/npm/monaco-editor@0.43.0/min/vs
https://code.visualstudio.com/docs/editor/codebasics
https://github.com/airbnb/polyglot.js/blob/master/LICENSE
https://github.com/airbnb/polyglot.js/blob/master/lib/polyglot.js
https://github.com/google-research/google-research/blob/master/scann/docs
https://github.com/kurkle/color
https://github.com/mac-s-g
https://github.com/markedjs/marked.
https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt
https://github.com/suren-atoyan/monaco-loader
transloadit/uppy#1042
https://lea.verou.me
https://lodash.com/license
https://marked.js.org/
https://mui.com/production-error/?code=
https://mui.com/r/x-data-grid-no-dimensions.
https://npms.io/search?q=ponyfill.
https://openjsf.org/
https://opensource.org/licenses/MIT
https://qdrant.tech/documentation/concepts/filtering/
https://qdrant.tech/documentation/concepts/search
https://qdrant.tech/documentation/interfaces/
https://qdrant.tech/documentation/quick-start/
https://reactjs.org/docs/error-decoder.html?invariant=
https://snapshots.qdrant.io/manifest.json
https://uppy.io/docs/instagram/
https://uppy.io/docs/plugins/
https://uppy.io/docs/xhr-upload/
https://www.chartjs.org
-LOW ref/words/password references a 'password' _password
get password
set password
toggle password visibility
-LOW ref/words/plugin references a 'plugin' Already found a plugin named
Expected a plugin class
Removing plugin
The given target is not a Plugin class
_plugins
a React Component instead of a plugin
addPlugins
all files and uninstalling plugins
ensureLoaderPluginIsLoaded
for the Instagram plugin
get plugins
getPluginState
getPlugins
getTargetPlugin
isPluginEnabled
iteratePlugins
nIf you meant to target a plugin
notifyPlugins
plugin enabled
pluginId
pluginName
pluginScopeKeys
removePlugins
setPluginState
static initPlugin
stylisPlugins
to add your plugin to another plugin
uninstallPlugin

Deleted: qdrant/usr/lib/qdrant/static/assets/tsMode-cc8e135c.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant-oci-entrypoint/var/lib/db/sbom/qdrant-oci-entrypoint-1.11.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/9b3bac129de31cd83ed12ff2bb71

Deleted: qdrant/usr/lib/qdrant/static/assets/freemarker2-531aa792.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/jsonMode-0a4866de.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/var/lib/db/sbom/qdrant-1.11.0-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
-MEDIUM net/download download files downloadLocation
-LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/2a57e9314aac521d3e4100ec6303

Deleted: qdrant/usr/lib/qdrant/static/assets/liquid-8e7adf27.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/razor-32633aff.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Deleted: qdrant/usr/lib/qdrant/static/assets/javascript-646404ac.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
-LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/htmlMode-d8ab5655.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/liquid-ea2f77e3.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/razor-3d43412c.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/var/lib/db/sbom/qdrant-1.11.1-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/51f6558a09b23f05307e9330208e

Added: qdrant-oci-entrypoint/var/lib/db/sbom/qdrant-oci-entrypoint-1.11.1-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/07fc5ae95bf37ae3f07edc6ab6b8

Added: qdrant-oci-compat/var/lib/db/sbom/qdrant-oci-compat-1.11.1-r0.spdx.json [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM net/download download files downloadLocation
+LOW ref/site/url contains embedded HTTPS URLs https://spdx.org/spdxdocs/chainguard/melange/d4392fdcd76c7aa90cccb98a05db

Added: qdrant/usr/lib/qdrant/static/assets/xml-d7030374.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/typescript-f19f45df.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/html-666cc108.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/handlebars-71def87f.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/freemarker2-72f9d1cf.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/mdx-883178d1.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/tsMode-e8e41b42.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/index-c6c85a7c.js [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM 3P/threat_hunting/metasploit references 'metasploit' tool, by mthcht Set payload
+MEDIUM combo/stealer/browser Uses HTTP, archives, and references multiple browsers .config
Chrome
Firefox
POST
Safari
https
tar
zip
+MEDIUM databases/mysql accesses MySQL databases mysql
+MEDIUM exec/cmd executes a command _innerExecuteCommands
_onDidExecuteCommand
_onWillExecuteCommand
_runEditorCommand
execCommand:
executeCmd
executeCommands
runCommand
runDOMCommand
+MEDIUM kernel/platform get system identification process.arch
process.platform
+MEDIUM net/download download files Cancel download
DOWNLOAD_URL
Download as CSV
Download as Excel
Download canceled
Download snapshot
DownloadURL
Preparing download
abortDownload
async downloadSnapshot
cloud-download
cloudDownload
desktop-download
desktopDownload
downloadResource
onDownloadProgress
the previous download is finished
the snapshot to download
+MEDIUM net/fetch Invokes curl curl -L -X POST
curl -L -X PUT
curl -X PUT
+MEDIUM net/http/form/upload upload content via HTTP form POST
application/x-www-form-urlencoded
+MEDIUM net/http/post submit content to websites POST
http
+MEDIUM net/upload uploads files UPLOADING
UploadAllowed
UploadBatches
UploadButton
UploadFileTypes
UploadInProgress
UploadProgress
UploadStarted
UploadUrl
UploadX
UploadedBytes
UploadedOfTotal
UploadedSize
UploadedSnapshot
Uploader
Uploading
Uploads
uploadBundle
uploadComplete
uploadFailed
uploadFiles
uploadID
uploadNewlyAdded
uploadProgress
uploadRemoteFile
uploadStalled
uploadStartedFiles
uploadState
uploadURL
uploadXFiles
uploadXNewFiles
uploaded_snapshot
uploaderEvents
uploaders
uploading
uploads
+MEDIUM net/url/encode encodes URL, likely to pass GET variables urlencode
+MEDIUM net/websocket supports web sockets WebSocket
+MEDIUM ref/extensions/office References multiple Office file extensions (possible exfil) docm
docx
ppt
pst
xlsx
+MEDIUM ref/program/powershell powershell powershell-b433b622
+MEDIUM ref/words/intercept References interception interceptors
+MEDIUM techniques/code_eval evaluate code dynamically using exec() exec("")
exec(b)
exec(b,b
exec(b,y)
exec(d)
exec(e))
exec(e),r
exec(e,l,a)
exec(e,n,o)
exec(e,s,r)
exec(f)
exec(g)
exec(he)))
exec(i))
exec(i),a
exec(lt),ue
exec(n)
exec(o),a
exec(o),s
exec(p)
exec(r)
exec(s))
exec(this
exec(u
exec(v)
exec(w))
+LOW compression/gzip works with gzip files gzip
+LOW encoding/base64 Supports base64 encoded strings base64
+LOW encoding/json/decode Decodes JSON messages JSON.parse
+LOW encoding/json/encode encodes JSON JSON.stringify
+LOW env/get Retrieve environment variable values env.BUILD
env.SNAP
env.VSCODE
+LOW fd/read reads from a file handle _source.read()
e).read()
i.read()
o.read()
reader.read()
tokenizer.read()
+LOW fs/link/create May create hard file links _link
+LOW fs/mount mounts file systems -o
mount
+LOW net/http/accept/encoding set HTTP response encoding format (example: gzip) Accept-Encoding
+LOW net/http/request makes HTTP requests User-Agent
+LOW net/socket/listen listen on a socket accept
listen
socket
+LOW net/socket/send send a message to a socket _send
+LOW ref/path/hidden possible hidden file path /jsdom/.test
/node_modules/.pnpm
+LOW ref/site/url contains embedded HTTPS URLs https://api.qdrant.tech/api-reference/
https://bugs.webkit.org/show_bug.cgi?id=68196
https://cdn.jsdelivr.net/npm/monaco-editor@0.43.0/min/vs
https://code.visualstudio.com/docs/editor/codebasics
https://github.com/airbnb/polyglot.js/blob/master/LICENSE
https://github.com/airbnb/polyglot.js/blob/master/lib/polyglot.js
https://github.com/google-research/google-research/blob/master/scann/docs
https://github.com/kurkle/color
https://github.com/mac-s-g
https://github.com/markedjs/marked.
https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt
https://github.com/suren-atoyan/monaco-loader
transloadit/uppy#1042
https://lea.verou.me
https://lodash.com/license
https://marked.js.org/
https://mui.com/production-error/?code=
https://mui.com/r/x-data-grid-no-dimensions.
https://npms.io/search?q=ponyfill.
https://openjsf.org/
https://opensource.org/licenses/MIT
https://qdrant.tech/documentation/concepts/filtering/
https://qdrant.tech/documentation/concepts/search
https://qdrant.tech/documentation/interfaces/
https://qdrant.tech/documentation/quick-start/
https://qdrant.tech/documentation/tutorials/create-snapshot/
https://reactjs.org/docs/error-decoder.html?invariant=
https://snapshots.qdrant.io/manifest.json
https://uppy.io/docs/instagram/
https://uppy.io/docs/plugins/
https://uppy.io/docs/xhr-upload/
https://www.chartjs.org
+LOW ref/words/password references a 'password' _password
get password
set password
toggle password visibility
+LOW ref/words/plugin references a 'plugin' Already found a plugin named
Expected a plugin class
Removing plugin
The given target is not a Plugin class
_plugins
a React Component instead of a plugin
addPlugins
all files and uninstalling plugins
ensureLoaderPluginIsLoaded
for the Instagram plugin
get plugins
getPluginState
getPlugins
getTargetPlugin
isPluginEnabled
iteratePlugins
nIf you meant to target a plugin
notifyPlugins
plugin enabled
pluginId
pluginName
pluginScopeKeys
removePlugins
setPluginState
static initPlugin
stylisPlugins
to add your plugin to another plugin
uninstallPlugin

Added: qdrant/usr/lib/qdrant/static/assets/yaml-214e621a.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/jsonMode-4941587d.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/cssMode-759f92ca.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/javascript-455badd0.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/python-1f0ea2d8.js [✅ LOW]

RISK KEY DESCRIPTION EVIDENCE
+LOW ref/site/url contains embedded HTTPS URLs https://github.com/microsoft/monaco-editor/blob/main/LICENSE.txt

Added: qdrant/usr/lib/qdrant/static/assets/worker-39c22122.js [⚠️ MEDIUM]

RISK KEY DESCRIPTION EVIDENCE
+MEDIUM techniques/code_eval evaluate code dynamically using exec() exec(at

@philroche philroche self-assigned this Aug 27, 2024
@philroche

philroche commented Aug 27, 2024

Copy link
Copy Markdown
Member

Changes summay:
Total files changed: 164

Total changes: 11985
Total additions: 7550
Total deletions: 4435

Total commits: 52

GitHub compare URL: qdrant/qdrant@6336395...8a46eb1

philroche
philroche approved these changes Aug 27, 2024
View reviewed changes

@philroche philroche left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a patch version bump.

All checks pass.

@philroche
philroche merged commit 8acce62 into main Aug 27, 2024
@philroche
philroche deleted the wolfictl-ab880ebb-fd83-4fc4-8c98-f2e40de11647 branch August 27, 2024 12:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@philroche philroche philroche approved these changes

Assignees

@philroche philroche

Labels

automated pr P1 This label indicates our scanning found High, Medium or Low CVEs for these packages. request-version-update request for a newer version of a package service:bincapz/pass tests/missing

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@philroche @wolfi-bot