Skip to content

CRASM-3844 Resolve CheckmarX vulnerability dependencies#1500

Open
jayjaybunce wants to merge 5 commits intodevelopfrom
jb-crasm-3844
Open

CRASM-3844 Resolve CheckmarX vulnerability dependencies#1500
jayjaybunce wants to merge 5 commits intodevelopfrom
jb-crasm-3844

Conversation

@jayjaybunce
Copy link
Copy Markdown
Contributor

@jayjaybunce jayjaybunce commented Mar 30, 2026

🗣 Description

Packages Upgraded
Frontend
aws-amplify - From 5.3.12 to 6.16.3
@aws-amplify/ui-react - From 5.0.4 to 6.15.2
express-rate-limit - From 8.2.1 to 8.3.2
rollup - From 4.22.4 to 4.59.0
minimatch - From unpinned to 10.2.5
basic-ftp - From unpinned to 5.2.0
serverless-better-credentials - From 1.2.0 to 2.0.1
serverless-domain-manager - From from 7.0.0 to 10.0.0

Backend
aiohttp - From 3.12.14 to 3.13.3
cryptography - From 44.0.1 to 46.0.6
Django - From 5.2.9 to 5.2.11
PyJWT - From 2.10.1 to 2.12.0
orjson - From 3.10.12 to 3.11.7
python-multipart - From 0.0.19 to 0.0.22

Code Changes
With the upgrade to aws-amplify and @aws-amplify/ui-react to version 6, code changes were required to use of these packages in the frontend. Relevant changes are in useApi.ts and App.tsx

Vulnerabilities Resolved
7 Critical
17 High
12 Medium
6 Low

💭 Motivation and context

Resolves CRASM-3844

🧪 Testing

✅ Pre-approval checklist

  • This PR has an informative and human-readable title.
  • Changes are limited to a single goal - eschew scope creep!
  • All future TODOs are captured in issues, which are referenced in code comments.
  • All relevant type-of-change labels have been added.
  • I have read the CONTRIBUTING document.
  • These code changes follow cisagov code standards.
  • All relevant repo and/or project documentation has been updated to reflect the changes in this PR.
  • Tests have been added and/or modified to cover the changes in this PR.
  • All new and existing tests pass.
  • Bump major, minor, patch, pre-release, and/or build versions as appropriate via the bump_version script if this repository is versioned and the changes in this PR warrant a version bump.
  • Create a pre-release (necessary if and only if the pre-release version was bumped).

✅ Pre-merge checklist

  • Revert dependencies to default branches.
  • Finalize version.

✅ Post-merge checklist

  • Create a release (necessary if and only if the version was bumped).

@jayjaybunce jayjaybunce changed the title resolve critical vulns DRAFT: Resolve CheckmarX vulnerability dependencies Mar 31, 2026
@jayjaybunce jayjaybunce marked this pull request as ready for review April 2, 2026 18:07
@jayjaybunce jayjaybunce changed the title DRAFT: Resolve CheckmarX vulnerability dependencies CRASM-3844 Resolve CheckmarX vulnerability dependencies Apr 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants