New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

同学，您这个项目引入了1007个开源组件，存在34个漏洞，辛苦升级一下 #80

Open

ghost opened this issue Mar 9, 2022 · 1 comment

ghost commented Mar 9, 2022

检测到 catalinmiron/react-typical 一共引入了1007个开源组件，存在34个漏洞

漏洞标题：yeikos js.merge 安全漏洞
缺陷组件：[email protected]
漏洞编号：CVE-2020-28499
漏洞描述：yeikos js.merge是美国Yeikos个人开发者的一个应用软件。提供了合并js工具。
yeikos js.merge 中存在安全漏洞。该漏洞源于所有相关分支的合并都容易受到该代码库的原型影响。以下产品及版本受到影响：yeikos js.merge
影响范围：(∞, 2.1.1)
最小修复版本：2.1.1
缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]>[email protected]>[email protected]

另外还有34个漏洞，详细报告：https://mofeisec.com/jr?p=aec87b

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment