Check logs Sprint 12.6 week 2

[hcaofec]

• Log review needs to be completed for sprint 12.6 week 2 per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

• Create check logs tickets for the next sprint

[johnnyporkchops]

Vulnerabilities:

FEC-CMS:
Total 2

package.json: 1
Medium: Prototype Pollution: fecgov/fec-cms#3740

requirements.txt: 1
Medium: Timing Attack in wagtail@2.7.2: fecgov/fec-cms#3777

openFEC:
Total 2

package.json: 1
Medium: Prototype Pollution #4337

data/flyway/build.gradle: 1
High: XML External Entity (XXE) Injection: #4408

FEC-EREGS:
None

FEC-PATTERN-LIBRARY:
None

Cloud.gov Dashboard: 9 deployer accounts, same as last week.
Offboarding: Nothing to report

[johnnyporkchops]

Completed log review for 12.6 week 2. Closing issue.