New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Maven local 2 #130

Closed

tiagobento wants to merge 727 commits into main from maven-local-2

Closed

Maven local 2 #130

No transfer progres

GitHub Advanced Security / CodeQL succeeded Oct 2, 2024 in 4s

11 new alerts including 11 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

11 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 40 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 74 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 76 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 100 in packages/maven-base/index.js

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This path concatenation which depends on

library input

is later used in a

shell command

.
This path concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 107 in packages/maven-base/index.js

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 107 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 116 in packages/maven-base/index.js

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 116 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.
This shell command depends on an uncontrolled

absolute path

.
This shell command depends on an uncontrolled

absolute path

.
This shell command depends on an uncontrolled

file name

.
This shell command depends on an uncontrolled

absolute path

.

Check warning on line 135 in packages/maven-base/index.js

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 138 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 140 in packages/maven-base/index.js

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.