Details
-
Fix
-
Status: Open (View Workflow)
-
Minor
-
Resolution: Unresolved
-
2.7.3
-
None
-
None
-
CVE-2025-27789
Description
Current Situation
- AngularJS makes use of @babel.runtime 2.25.0 at build time of the JOC Cockpit JS code.
- A vulnerability affects this version, see https://nvd.nist.gov/vuln/detail/CVE-2025-27789 .
- JOC Cockpit itself is not affected.
Desired Behavior
- JOC Cockpit 2.8.0 will be build with a more recent version of AngularJS v.19 which does not make use of the vulnerable 3rd party version.