Submitting PR with CogniwareIMS

[cogniware-devops]

Description

Cogniware IMS is a GenAI Example built on top of OPEA, with CogniDream platform.

Issues

n/a

Type of change

New feature (non-breaking change which adds new functionality)
Dependencies
Web Framework
fastapi==0.104.1
uvicorn[standard]==0.24.0
python-multipart==0.0.6

Security
python-jose[cryptography]==3.3.0
passlib[bcrypt]==1.7.4
bcrypt==4.1.1
cryptography==41.0.7

Database
sqlalchemy==2.0.23
psycopg2-binary==2.9.9
alembic==1.12.1

Redis & Caching
redis==5.0.1
hiredis==2.2.3

HTTP Client
httpx==0.25.2
aiohttp==3.9.1

Data Processing
pandas==2.1.3
numpy==1.26.2
openpyxl==3.1.2
PyPDF2==3.0.1
python-docx==1.1.0

Validation
pydantic==2.5.2
pydantic-settings==2.1.0
email-validator==2.1.0

Utilities
python-dotenv==1.0.0
PyYAML==6.0.1

Logging & Monitoring
python-json-logger==2.0.7

AI/ML Libraries (for local processing)
scikit-learn==1.3.2

Testing (dev dependencies)
pytest==7.4.3
pytest-asyncio==0.21.1
pytest-cov==4.1.0
httpx-mock==0.11.0

#Code Quality (dev dependencies)
black==23.11.0
flake8==6.1.0
mypy==1.7.1

##Tests
Automated Tests as part of OPEA CI/CD

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

CogniwareIms/frontend/package-lock.json

Name	Version	Vulnerability	Severity
next	14.0.4	Authorization Bypass in Next.js Middleware	critical
		Next.js Server-Side Request Forgery in Server Actions	high
		Next.js Cache Poisoning	high
		Next.js authorization bypass vulnerability	high
		Next Vulnerable to Denial of Service with Server Components	high
		Next has a Denial of Service with Server Components - Incomplete Fix Follow-Up	high
		Denial of Service condition in Next.js image optimization	moderate
		Next.js Allows a Denial of Service (DoS) with Server Actions	moderate
		Next.js Affected by Cache Key Confusion for Image Optimization API Routes	moderate
		Next.js Content Injection Vulnerability for Image Optimization	moderate
		Next.js Improper Middleware Redirect Handling Leads to SSRF	moderate
		Information exposure in Next.js dev server due to lack of origin verification	low
		Next.js Race Condition to Cache Poisoning	low

Scanned Files

• CogniwareIms/frontend/package-lock.json