Update JOC Cockpit GUI to Angular 16.1 due to 3rd-party vulnerabilities (CVE-2023-26118, CVE-2023-26117, CVE-2023-26116)

Current Situation

• The JS7 JOC Cockpit GUI makes use of Angular 14.3. The following vulnerabilities affect this version:
  • https://nvd.nist.gov/vuln/detail/CVE-2023-26116
  • https://nvd.nist.gov/vuln/detail/CVE-2023-26117
  • https://nvd.nist.gov/vuln/detail/CVE-2023-26118

Risk Mitigation

• SOS rates the vulnerabilities being of low risk. There is no exploit for the vulnerabilities.
• The JOC Cockpit does not make use of the functions vulnerable to regular expression attacks.

Fix

• Fixes will become available with next maintenance releases.
• This includes to migrate the JOC Cockpit GUI to Angular 16.1