Re: [PR] [CVE][High]Mitigate CVE-2026-25896 by update fast-xml-parser to 5.3.8 [incubator-kie-tools]

2026-04-15 Thread via GitHub


thiagoelg closed pull request #3500: [CVE][High]Mitigate CVE-2026-25896  by 
update fast-xml-parser to 5.3.8
URL: https://github.com/apache/incubator-kie-tools/pull/3500


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



Re: [PR] [CVE][High]Mitigate CVE-2026-25896 by update fast-xml-parser to 5.3.8 [incubator-kie-tools]

2026-04-15 Thread via GitHub


thiagoelg commented on PR #3500:
URL: 
https://github.com/apache/incubator-kie-tools/pull/3500#issuecomment-4252689512

   Closing as https://github.com/apache/incubator-kie-tools/pull/3533 already 
fixed the CVE.
   Thanks @athirakm94 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



Re: [PR] [CVE][High]Mitigate CVE-2026-25896 by update fast-xml-parser to 5.3.8 [incubator-kie-tools]

2026-04-15 Thread via GitHub


yesamer commented on PR #3500:
URL: 
https://github.com/apache/incubator-kie-tools/pull/3500#issuecomment-4252646926

   @thiagoelg I believe we no longer need this after the merge of 
https://github.com/apache/incubator-kie-tools/pull/3533. Is that correct?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



Re: [PR] [CVE][High]Mitigate CVE-2026-25896 by update fast-xml-parser to 5.3.8 [incubator-kie-tools]

2026-03-19 Thread via GitHub


thiagoelg commented on PR #3500:
URL: 
https://github.com/apache/incubator-kie-tools/pull/3500#issuecomment-4091944399

   There are probably some changes or limitations with the new version that are 
breaking the build.
   
   ```
   Processing 
'/home/runner/work/incubator-kie-tools/incubator-kie-tools/packages/uniforms-patternfly/dist-tests/junit-report.xml'
   Error: Entity expansion limit exceeded: 1001 > 1000
   at B.K [as replaceEntitiesValue] 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/node_modules/.pnpm/[email protected]/node_modules/fast-xml-parser/lib/fxp.cjs:1:27694)
   at B.q [as buildAttributesMap] 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/node_modules/.pnpm/[email protected]/node_modules/fast-xml-parser/lib/fxp.cjs:1:21299)
   at B.Z [as parseXml] 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/node_modules/.pnpm/[email protected]/node_modules/fast-xml-parser/lib/fxp.cjs:1:25154)
   at ft.parse 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/node_modules/.pnpm/[email protected]/node_modules/fast-xml-parser/lib/fxp.cjs:1:33651)
   at module.exports 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/scripts/check-junit-report-results/src/parseFile.js:33:30)
   at module.exports 
(/home/runner/work/incubator-kie-tools/incubator-kie-tools/scripts/check-junit-report-results/src/index.js:42:5)
   at async eval (eval at callAsyncFunction 
(/home/runner/work/_actions/actions/github-script/v6/dist/index.js:15143:16), 
:9:1)
   at async main 
(/home/runner/work/_actions/actions/github-script/v6/dist/index.js:15236:20)
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


-
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]