Skip to content

chore(ui-security): bump uuid and dompurify #27696

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
harsh-vador merged 3 commits into from
Apr 27, 2026

Merge branch 'main' into fix-uuid-vulnerability

7e35f62
Select commit
Loading
Failed to load commit list.
Merged

chore(ui-security): bump uuid and dompurify #27696

Merge branch 'main' into fix-uuid-vulnerability
7e35f62
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / [open-metadata-ui] SonarCloud Code Analysis succeeded Apr 26, 2026 in 5m 9s

Quality Gate passed

Issues
1062 New issues
0 Accepted issues

Measures
17 Security Hotspots
0.0% Coverage on New Code
3.9% Duplication on New Code

See analysis details on SonarQube Cloud

Annotations

Check warning on line 536 in src/utils/CanvasUtils.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `Number.parseFloat` over `parseFloat`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8u7ewsciz29iudgg&open=AZ2-8u7ewsciz29iudgg&pullRequest=27696

Check failure on line 345 in src/components/ActivityFeed/FeedEditor/FeedEditor.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `.dataset` over `setAttribute(…)`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8rHTwsciz29iudY6&open=AZ2-8rHTwsciz29iudY6&pullRequest=27696

Check warning on line 205 in src/components/OntologyExplorer/OntologyExplorer.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8tPNwsciz29iudc6&open=AZ2-8tPNwsciz29iudc6&pullRequest=27696

Check warning on line 357 in src/components/common/CoverImageUpload/MUICoverImageUpload.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `globalThis` over `window`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8pGKwsciz29iudU7&open=AZ2-8pGKwsciz29iudU7&pullRequest=27696

Check failure on line 98 in src/utils/CuratedAssetsUtils.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 17 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vsOwsciz29iudi1&open=AZ2-8vsOwsciz29iudi1&pullRequest=27696

Check warning on line 527 in src/components/SearchSettings/EntitySeachSettings/EntitySearchSettings.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Handle this exception or don't catch it at all. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8tf6wsciz29iuddn&open=AZ2-8tf6wsciz29iuddn&pullRequest=27696

Check warning on line 81 in src/components/Metric/MetricHeaderInfo/MetricHeaderInfo.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8tbcwsciz29iuddf&open=AZ2-8tbcwsciz29iuddf&pullRequest=27696

Check warning on line 31 in src/utils/Lineage/Layout/ELKUtil/ELKUtil.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Useless constructor. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8uh6wsciz29iudfn&open=AZ2-8uh6wsciz29iudfn&pullRequest=27696

Check warning on line 200 in src/utils/QueryBuilderElasticsearchFormatUtils.js

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Complete the task associated to this "TODO" comment. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vN4wsciz29iudhd&open=AZ2-8vN4wsciz29iudhd&pullRequest=27696

Check warning on line 54 in src/utils/ContainerDetailUtils.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

`newTagsFqnList` should be a `Set`, and use `newTagsFqnList.has()` to check existence or non-existence. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vczwsciz29iudiO&open=AZ2-8vczwsciz29iudiO&pullRequest=27696

Check warning on line 118 in src/components/common/Table/TableV2Utils.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

This assertion is unnecessary since it does not change the type of the expression. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8pJfwsciz29iudVH&open=AZ2-8pJfwsciz29iudVH&pullRequest=27696

Check warning on line 266 in src/utils/SchedularUtils.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `Number.isNaN` over `isNaN`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vn6wsciz29iudii&open=AZ2-8vn6wsciz29iudii&pullRequest=27696

Check warning on line 48 in src/components/common/EntityListingTable/EntityListingTable.component.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

This assertion is unnecessary since it does not change the type of the expression. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8qQBwsciz29iudXO&open=AZ2-8qQBwsciz29iudXO&pullRequest=27696

Check warning on line 93 in src/pages/SettingsNavigationPage/SettingsNavigationPage.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Unexpected negated condition. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8uf0wsciz29iudfi&open=AZ2-8uf0wsciz29iudfi&pullRequest=27696

Check warning on line 83 in src/components/WorkflowDefinitions/WorkflowBuilder/forms/QueryBuilderSection.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8rP_wsciz29iudZJ&open=AZ2-8rP_wsciz29iudZJ&pullRequest=27696

Check warning on line 202 in src/components/Explore/AdvanceSearchProvider/AdvanceSearchProvider.component.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

'checkTree' is deprecated. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8sH_wsciz29iudaz&open=AZ2-8sH_wsciz29iudaz&pullRequest=27696

Check failure on line 1403 in src/components/OntologyExplorer/hooks/useOntologyGraph.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Provide a compare function that depends on "String.localeCompare", to reliably sort elements alphabetically. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8tUVwsciz29iuddP&open=AZ2-8tUVwsciz29iuddP&pullRequest=27696

Check warning on line 1516 in src/utils/EntityLineageUtils.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Unexpected negated condition. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vqTwsciz29iudi0&open=AZ2-8vqTwsciz29iudi0&pullRequest=27696

Check warning on line 231 in src/rest/rdfAPI.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8wLWwsciz29iudkT&open=AZ2-8wLWwsciz29iudkT&pullRequest=27696

Check warning on line 366 in src/components/common/CoverImageUpload/MUICoverImageUpload.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `globalThis` over `window`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8pGKwsciz29iudVA&open=AZ2-8pGKwsciz29iudVA&pullRequest=27696

Check warning on line 16 in src/utils/EnvironmentUtils.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer using an optional chain expression instead, as it's more concise and easier to read. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vU6wsciz29iudh1&open=AZ2-8vU6wsciz29iudh1&pullRequest=27696

Check warning on line 78 in src/components/Visualisations/Chart/CardinalityDistributionChart.component.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Move this component definition out of the parent component and pass data as props. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8tmuwsciz29iuddz&open=AZ2-8tmuwsciz29iuddz&pullRequest=27696

Check warning on line 257 in src/utils/TableProfilerUtils.ts

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `Number.parseFloat` over `parseFloat`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8vj1wsciz29iudia&open=AZ2-8vj1wsciz29iudia&pullRequest=27696

Check warning on line 87 in src/components/common/atoms/TagChip/TagChip.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Extract this nested ternary operation into an independent statement. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8o3wwsciz29iudUm&open=AZ2-8o3wwsciz29iudUm&pullRequest=27696

Check warning on line 41 in src/components/WorkflowDefinitions/WorkflowBuilder/common/FormField.tsx

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / [open-metadata-ui] SonarCloud Code Analysis

Prefer `String#replaceAll()` over `String#replace()`. 

See more on https://sonarcloud.io/project/issues?id=open-metadata-ui&issues=AZ2-8rUYwsciz29iudZc&open=AZ2-8rUYwsciz29iudZc&pullRequest=27696
View more details on SonarQubeCloud