Address security issues with v1.3.18 build

[complexbear]

Hi,
As part of running OPENCGA v1.3.18 on our AWS platform, the ECR scanning has identified a number of critical vulnerabilities.

Please could the relevant libraries be updated and the new build be checked against NIST CVE database to check no critical vulnerabilities remain. https://nvd.nist.gov/vuln

I will attach a file containing the vulnerability details soon.

Thanks
[email protected]

[complexbear]

opencga-vulnerabilities.csv

[complexbear]

Is it possible to scan the v1.3.18 build using https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security ?

[imedina]

@complexbear Thanks for the detailed list, we are looking into this now