Skip to content

Manual revert the upgrade of @angular/cli and @angular-devkit for zod's compromized version v4.6.6 in the v 20.3.41 - #1371

Closed
xingzhang-suse wants to merge 0 commit into
neuvector:mainfrom
xingzhang-suse:main
Closed

xingzhang-suse wants to merge 0 commit into
neuvector:mainfrom
xingzhang-suse:main

Conversation

@xingzhang-suse

Copy link
Copy Markdown
Collaborator

Revert the upgrade of @angular/cli and @Angular-devkit

@xingzhang-suse
xingzhang-suse requested a review from a team as a code owner October 27, 2026 02:55
@xingzhang-suse
xingzhang-suse requested review from gaktive, lsongsuse and rushk014 and removed request for gaktive October 27, 2026 02:55
@xingzhang-suse

Copy link
Copy Markdown
Collaborator Author

https://suse.slack.com/archives/C0737K8E3GW/p1793063858586569

🚨 SCA Monitoring - Potentially Compromised Packages Identified in Use
(This requires immediate investigation.)

@sec-alerts please act immediately

Instructions for the Cloud Native firefighter

  • Quickly react to this issue with: 👀 (alert is being investigated) | ✅ (alert was investigated and nothing was found) | :alert: (possible compromise found, further investigation is in progress)
  • Follow the instructions outlined here for follow-up actions.

Instructions for the CyberSec team

  • Follow the playbook instructions (link to be added).

🔗 GitHub Issue: https://github.com/rancher/code-scanning-issues/issues/344
Org SBOM scan: 1 finding
• zod@4.6.6 — neuvector/manager

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant