Skip to content

Update werkzeug and protobuf versions for sample-app (CVE-2026-21860 and CVE-2025-66221)#6476

Merged
kkondaka merged 3 commits intoopensearch-project:mainfrom
kkondaka:cve-fixes
Feb 3, 2026
Merged

Update werkzeug and protobuf versions for sample-app (CVE-2026-21860 and CVE-2025-66221)#6476
kkondaka merged 3 commits intoopensearch-project:mainfrom
kkondaka:cve-fixes

Conversation

@kkondaka
Copy link
Copy Markdown
Collaborator

@kkondaka kkondaka commented Feb 2, 2026

Description

Update werkzeug and protobuf versions for sample-app (CVE-2026-21860 and CVE-2025-66221)

Issues Resolved

Resolves #[Issue number to be closed when this PR is merged]

Check List

  • New functionality includes testing.
  • New functionality has a documentation issue. Please link to it in this PR.
    • New functionality has javadoc added
  • [X ] Commits are signed with a real name per the DCO

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

…and CVE-2025-66221)

Signed-off-by: Krishna Kondaka <krishkdk@amazon.com>
Signed-off-by: Krishna Kondaka <krishkdk@amazon.com>
Signed-off-by: Krishna Kondaka <krishkdk@amazon.com>
@kkondaka kkondaka merged commit 80da1c2 into opensearch-project:main Feb 3, 2026
82 of 84 checks passed
@opensearch-trigger-bot
Copy link
Copy Markdown
Contributor

The backport to 2.13 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-2.13 2.13
# Navigate to the new working tree
cd .worktrees/backport-2.13
# Create a new branch
git switch --create backport/backport-6476-to-2.13
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 80da1c235c3fa3c34a4d289011a797fefd5da8f5
# Push it to GitHub
git push --set-upstream origin backport/backport-6476-to-2.13
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-2.13

Then, create a pull request where the base branch is 2.13 and the compare/head branch is backport/backport-6476-to-2.13.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

3 participants