Security Issues in glitchtip backend Repository

Review this checklist before submitting.

  • GitLab issues are for bug reports and feature requests. If this is a help request, please post on Gitter. If you have or want paid support, please use the chat widget on https://glitchtip.com.
  • Document reproduction steps. Be as detailed as possible.
  • If applicable, try to reproduce the problem on https://app.glitchtip.com
  • Be considerate of the reviewer of your issue and their time. They are likely unpaid. GlitchTip is open source and comes with absolutely no warrantee.
  • Check existing issues first. 👍 the issue to show interest.

Description

I trying to get changes made upstream to clean up any security-related dependencies in both the glitchtip front-end and back-end repository

Proposed Solution(s)

We are using dependabot to alert our team on potential issues. We don't want to make major dependencies changes without having this made upstream first ideally.

Screenshot_2022-11-22_at_10.32.59

Again in cluster images scans is not great, we would ideally like to remove all 6 critical vulnerabilities and 44 high

Screenshot_2022-11-22_at_10.42.20

@bufke can you please review

Edited by MarkFreer