Skip to content

invalidate plots for obj2s - #564

Merged
alexvpickering merged 3 commits into
masterfrom
invalidate-obj2s-redos
Jul 13, 2026
Merged

invalidate plots for obj2s#564
alexvpickering merged 3 commits into
masterfrom
invalidate-obj2s-redos

Conversation

@alexvpickering

@alexvpickering alexvpickering commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Description

invalidates plots for obj2s

Details

URL to issue

N/A

Link to staging deployment URL (or set N/A)

N/A

Links to any PRs or resources related to this PR

Integration test branch

master

Merge checklist

Your changes will be ready for merging after all of the steps below have been completed.

Code updates

Have best practices and ongoing refactors being observed in this PR

  • Migrated any selector / reducer used to the new format.
  • All new dependency licenses have been checked for compatibility

Manual/unit testing

  • Tested changes using InfraMock locally or no tests required for change, e.g. Kubernetes chart updates.
  • Validated that current unit tests for code work as expected and are sufficient for code coverage or no unit tests required for change, e.g. documentation update.
  • Unit tests written or no unit tests required for change, e.g. documentation update.

Integration testing

You must check the box below to run integration tests on the latest commit on your PR branch.
Integration tests have to pass before the PR can be merged. Without checking the box, your PR
will not pass the required status checks for merging.

  • Started end-to-end tests on the latest commit.

Documentation updates

  • Relevant Github READMEs updated or no GitHub README updates required.
  • Relevant Wiki pages created/updated or no Wiki updates required.

Optional

  • Staging environment is unstaged before merging.
  • Photo of a cute animal attached to this PR.

Signed-off-by: Alex Pickering <alexvpickering@gmail.com>
Signed-off-by: Alex Pickering <alexvpickering@gmail.com>
Signed-off-by: Alex Pickering <alexvpickering@gmail.com>
@alexvpickering alexvpickering added the safe to run Marks the PR as safe to run checks on. IMPORTANT only add if from a trusted source. label Jul 13, 2026
@dbmi-svc-checkmarx

Copy link
Copy Markdown

Logo
Checkmarx One – Scan Summary & Detailsfdf7ccca-6d9e-4ffe-9a45-37029fc17f93


New Issues (5) Checkmarx found the following issues in this Pull Request
# Severity Issue Source File / Package Checkmarx Insight
1 HIGH CVE-2026-39243 Npm-decompress-4.2.1
detailsDescription: decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When proce...
Attack Vector: LOCAL
Attack Complexity: LOW
Vulnerable Package
2 MEDIUM CVE-2026-12590 Npm-body-parser-1.20.1
detailsRecommended version: 1.20.6
Description: Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.0.0-beta.1 prior to 2.3.0 , when the parser is configured with an invalid limit op...
Attack Vector: NETWORK
Attack Complexity: HIGH
Vulnerable Package
3 MEDIUM CVE-2026-12590 Npm-body-parser-1.20.2
detailsRecommended version: 1.20.6
Description: Impact: In body-parser versions prior to 1.20.6 (1.x line) and 2.0.0-beta.1 prior to 2.3.0 , when the parser is configured with an invalid limit op...
Attack Vector: NETWORK
Attack Complexity: HIGH
Vulnerable Package
4 MEDIUM CVE-2026-39245 Npm-decompress-4.2.1
detailsDescription: decompress contains an improper path containment check that enables directory traversal and arbitrary file write. The `safeMakeDir` function (index...
Attack Vector: LOCAL
Attack Complexity: LOW
Vulnerable Package
5 MEDIUM CVE-2026-39246 Npm-decompress-4.2.1
detailsDescription: decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries (type === 'symlink'), the x.li...
Attack Vector: LOCAL
Attack Complexity: LOW
Vulnerable Package

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@alexvpickering
alexvpickering merged commit 3b8a5cf into master Jul 13, 2026
23 of 27 checks passed
@alexvpickering
alexvpickering deleted the invalidate-obj2s-redos branch July 13, 2026 15:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

safe to run Marks the PR as safe to run checks on. IMPORTANT only add if from a trusted source.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants