[TEZ-4419] Upgrade node and yarn version and fix npm security issues in Tez UI module

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.10.2
• Assignee: Aman Raj
• Reporter: Nikhil Gupta
• Created: 31/May/22 08:00
• Updated: 17/Nov/22 09:51
• Resolved: 30/Jun/22 10:18

Issue Links

• is related to: TEZ-4436 [TEZ-UI] uses many vulnerable libraries
• links to: GitHub Pull Request #215

Sub-Tasks

• [CVE-2021-43138] Upgrade async from 2.3.0 to 2.6.4 to fix the vulnerability.: Resolved
• [CVE-2021-44906] Upgrade minimist version from 0.0.8 to 1.2.6 to fix the vulnerability: Resolved
• [CVE-2021-3918] Upgrade json-schema from 0.2.3 to 0.4.0 to fix the vulnerability: Resolved
• [WS-2020-0345] Upgrade jsonpointer version from 4.0.1 to 4.1.0: Resolved
• [CVE-2018-1000620] Upgrade cryptiles version from 2.0.5 to 4.1.2 to fix vulnerability: Resolved
• [CVE-2019-10744] Upgrade lodash.merge version to 4.6.2 to fix vulnerability: Resolved
• [WS-2020-0344] Upgrade is-my-json-valid from 2.16.0 to 2.20.3 to fix the vulnerability: Resolved