Resolve CVE-2023-37903 vulnerability about sorry-cypress

[mathpaquette]

also vm2 has been deprecated by now. https://www.npmjs.com/package/vm2

[mathpaquette]

#659 similar discussion

[mathpaquette]

@agoldis do you mind if I revisit this by removing pm2 once and for all ?

[agoldis]

@mathpaquette sure, just keep in mind that it allows the processes to run without restarts them manually on fatal crash

[mathpaquette]

@ravichandra480 apparently just yarn upgrade pm2@latest just made it. gimme some time to build and test

[ravichandra480]

Hi @mathpaquette Thanks for the quick help.

[ravichandra480]

Hi @agoldis, I tried to update the PM2 version that has removed the dependency on VM2 5643#issuecomment-1682304269 This fixes the vulnerability in sorry cypress, Is it fine If I make a PR with updating PM2 version @agoldis ? This will unblock us. And @mathpaquette can continue his work removing PM2 dependency on original feature Remove pm2 manager from Director in Dockerfile.

[mathpaquette]

vm2 has been removed by now

[mathpaquette]

@ravichandra480 just request these freshly created docker images:

#32 pushing manifest for docker.io//sorry-cypress-dashboard:latest@sha256:76bad8f0951ef541280b063d9fd64d959b74d86fecb3a7514e1c1a31f0f579aa
#32 pushing manifest for docker.io//sorry-cypress-dashboard:latest@sha256:76bad8f0951ef541280b063d9fd64d959b74d86fecb3a7514e1c1a31f0f579aa 1.0s done

https://hub.docker.com/layers/agoldis/sorry-cypress-director/latest/images/sha256-8d4ea94405628c946a0ee51f3d2919677a0bb40a93bc54d58c05303fd15d3176?context=explore

etc..