Hari

Plans for v2?

19

Hi Team, Our scans have identified a few dependencies as operational risk due to being old/unmaintained. These are coming from busboy and concat-stream dependencies. multer v2.0.0rc3 seems to be addressing...

log4j vulnerabilities

5

Is couchdb-lucene affected by any of the following vulnerabilities reported against log4j. And what are plans to fix them? CVE-2022-23307 CVE-2021-44228 CVE-2021-45046 CVE-2021-4104 CVE-2019-17571 CVE-2022-23302 CVE-2022-23305 CVE-2020-9488 CVE-2021-44832 CVE-2021-45105 Due...

java.net.MalformedURLException: unknown protocol: safkeyring during service startup - Need keyring support

13

**Describe the bug** Service startup fails when keyrings are used with API Catalog Discovery enabled. Turning off discovery works fine. Keyring Logic seems broken in api-layer. **Steps to Reproduce** Attempt...

Replace Javax dependencies with Jakarta 8 dependencies

5

**Is your feature request related to a problem? Please describe.** Request to replace Javax dependencies equivalent Jakarta dependencies. It has potential to reduce package sizes as Spring, Jackson have moved...

Is the program creating a vulnerability or finding a vulnerability? https://github.com/stripe/log4j-remediation-tools/blob/167e1f9012a4e0b8b7e97f49e5ed6ef932a42c52/confirm-vulnerabilities/pom.xml#L18-L21

zaas-client src/test/resources/keystores/truststore.p12 (EDC5129I No such file or directory.) error

2

**Describe the bug** REST API startup fails with followng error when apiml.gateway.ssl.* are not provided even when server.ssl.* has the necessary values. ``` Caused by: java.io.FileNotFoundException: src/test/resources/keystores/truststore.p12 (EDC5129I No such...

replace yamljs dependency with maintained alternative

4

Looks like yamljs author is not active in a long time. Please replace with popular library like https://github.com/nodeca/js-yaml or more maintained alternative like https://www.npmjs.com/package/yaml. There are multiple violations reported on...

Issue with docs.zowe.org/stable/getting-started/zowe-architecture/ - Inconsistent documentation for API Catalog port

3

## Description Zowe Architecture mentioned port for API Catalog as 7552 but the url for link on API Mediation Layer page takes me to something like https://:7554/apicatalog/ ..  When...

## Description Some error code e.g. ZWEAO500E don't have Action and Reason fields. Documentation should describe all actual reasons and actions for every error code listed. In case, a particular...