Repository navigation

All pull requests

Labels (25)Milestones (0)New pull request

Open

(90)

Closed

(1,346)

Remove websockets usage in cdap-ui
#1428GnsP opened Aug 12, 2026Collaborator1 of 6 tasks
3
Fix shell injection in generated gcloud IAM binding command in Namespace Admin > Service Accounts
#1427herdiyana256 opened Aug 5, 2026
10
Fix cross-user identity binding race in PROXY auth mode websocket setup
#1426herdiyana256 opened Aug 5, 2026
10
Fix arbitrary code execution and predictable session tokens in /updateTheme
#1425herdiyana256 opened Jul 25, 2026
14
[cherrypick - 610] add support for configurable entities limit for the connections browser
#1421GnsP opened Jun 30, 2026Collaborator1 of 6 tasks
2
Bump webpack-dev-server from 3.11.0 to 5.2.5
#1415dependabot[bot] opened Jun 20, 2026Bot
add logs
#1413sahusanket opened Jun 18, 2026Contributor6 tasks
4
Bump @babel/core from 7.7.4 to 7.29.6
#1409dependabot[bot] opened Jun 17, 2026Bot
Bump js-yaml from 4.1.0 to 4.2.0
#1408dependabot[bot] opened Jun 16, 2026Bot
security: prevent zip path traversal in unzip helpers
#1406XananasX7 opened Jun 3, 2026
7
Bump @protobufjs/utf8 from 1.1.0 to 1.1.1
#1400dependabot[bot] opened May 13, 2026Bot
Bump @babel/plugin-transform-modules-systemjs from 7.15.4 to 7.29.4
#1397dependabot[bot] opened May 9, 2026Bot
Bump uuid from 3.3.3 to 14.0.0
#1396dependabot[bot] opened Apr 23, 2026Bot
Bump follow-redirects from 1.13.3 to 1.16.0
#1395dependabot[bot] opened Apr 15, 2026Bot
Correlate WebSocket auth with the originating TCP socket
#1394TristanInSec opened Apr 10, 20263 tasks
Allowlist request options forwarded from the WebSocket handler
#1393TristanInSec opened Apr 10, 2026
Validate templateid/pluginid in pushConfiguration
#1392TristanInSec opened Apr 10, 2026
Restrict UI theme file loader to JSON files under the theme config dir
#1391TristanInSec opened Apr 10, 2026
1
Bump picomatch from 2.2.2 to 2.3.2
#1390dependabot[bot] opened Apr 8, 2026Bot
Bump lodash from 4.17.15 to 4.18.1
#1389dependabot[bot] opened Apr 3, 2026Bot
Bump lodash-es from 4.17.21 to 4.18.1
#1388dependabot[bot] opened Apr 2, 2026Bot
Bump yauzl from 2.7.0 to 3.2.1 in /cdap-ui-upgrade
#1386dependabot[bot] opened Mar 14, 2026Bot
Bump yauzl from 2.10.0 to 3.2.1 in /gitpod
#1385dependabot[bot] opened Mar 14, 2026Bot
Bump yauzl from 2.10.0 to 3.2.1 in /sandboxjs
#1384dependabot[bot] opened Mar 13, 2026Bot
Bump immutable from 3.8.2 to 3.8.3
#1383dependabot[bot] opened Mar 12, 2026Bot

Pull requests