dancefinder/dancefinder-app
5
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Activity
Labels Milestones New Issue
0 Open 15 Closed
Label
Clear labels
dependencies
docker
javascript
security
severity:critical
severity:high
severity:low
severity:moderate
Milestone
No milestone
Projects
Clear projects
Assignee
Clear assignees
No assignee
argoyle
buildtools
kubernetes
releaser
renovate
NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks security severity:high
#46 by argoyle was closed 2024-02-21 04:41:15 +00:00
Vite dev server option server.fs.deny can be bypassed when hosted on case-insensitive filesystem security severity:high
#45 by argoyle was closed 2024-02-03 04:48:12 +00:00
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning security severity:high
#43 by argoyle was closed 2024-02-06 04:41:11 +00:00
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization security severity:high
#42 by argoyle was closed 2024-02-06 04:41:10 +00:00
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links security severity:high
#41 by argoyle was closed 2024-02-06 04:41:09 +00:00
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links security severity:high
#40 by argoyle was closed 2024-02-06 04:41:06 +00:00
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization security severity:high
#39 by argoyle was closed 2024-02-06 04:41:06 +00:00
Improper Input Validation in tar-fs security severity:high
#38 by argoyle was closed 2024-02-06 06:53:26 +00:00
Regular Expression Denial of Service in string package security severity:high
#37 by argoyle was closed 2024-02-06 06:53:18 +00:00
glob-parent before 5.1.2 vulnerable to Regular Expression Denial of Service in enclosure regex security severity:high
#33 by argoyle was closed 2024-02-06 04:40:45 +00:00
Prototype Pollution in JSON5 via Parse Method security severity:high
#23 by argoyle was closed 2023-06-02 14:10:48 +00:00
Prototype Pollution in JSON5 via Parse Method security severity:high
#22 by argoyle was closed 2023-06-02 14:10:26 +00:00
jsonwebtoken has insecure input validation in jwt.verify function security severity:high
#21 by argoyle was closed 2023-06-02 14:10:40 +00:00
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) security severity:high
#16 by argoyle was closed 2022-12-05 13:03:29 +00:00
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable security severity:high
#15 by argoyle was closed 2022-12-05 13:03:24 +00:00