-
检测到 pppanzhiwei/wish-list 一共引入了1138个开源组件，存在1个漏洞
```
漏洞标题：Color-String 安全漏洞
缺陷组件：color-string@0.3.0
漏洞编号：CVE-2021-29060
漏洞描述：Color-String是开源的一个库，用于解析和生成 CSS 颜色字符串。
Color-String 1.5.5及之前版本存在安全漏洞，该漏洞源于当应…
ghost updated
2 years ago
-
Hey there, I'm working on getting BOOTRST and reset source detection working for entering bootloader on a qmk based keyboard https://github.com/qmk/lufa/pull/5
In that process, I noticed that the e…
-
## CVE-2021-29060 - Medium Severity Vulnerability
Vulnerable Library - color-string-1.5.3.tgz
Parser and generator for CSS color strings
Library home page: https://registry.npmjs.org/color-string/-/…
-
Reproduction: https://sass-lang.com/playground/#eJwzNHAoLU5VUCpOLC62Ss7PyS9SsubiUgGzrBSU00zTzNPSgCIOKalJpekKYHG95IzEvLzUHA2IMh0F9fKMzJLUvNTiYnVNawAzfhqY
```scss
@use "sass:color";
$color: #f5f7…
-
Phoronix Test Suite version: 10.8.4.
Not sure if this has already been reported in another issue, but in my system, the CPU frequency is not recorded despite setting `MONITOR=cpu.freq`.
This is …
-
Edit: let's go for it
- [x] [rework-vars](https://github.com/reworkcss/rework-vars#preserve-default-false)
- [ ] [rework-custom-media](https://github.com/reworkcss/rework-custom-media/issues/2)
- [ ] …
-
## CVE-2021-29060 - Medium Severity Vulnerability
Vulnerable Library - color-string-0.3.0.tgz
Parser and generator for CSS color strings
Library home page: https://registry.npmjs.org/color-string/-/…
-
## CVE-2021-29060 - Medium Severity Vulnerability
Vulnerable Library - color-string-1.5.3.tgz
Parser and generator for CSS color strings
Library home page: https://registry.npmjs.org/color-string/-/…
-
## CVE-2021-29060 - Medium Severity Vulnerability
Vulnerable Library - color-string-1.5.3.tgz
Parser and generator for CSS color strings
Library home page: https://registry.npmjs.org/color-string/-/…
-
[PostCSS - a tool for transforming CSS with JavaScript](http://postcss.org/)
[postcss-cssnext features](http://cssnext.io/features/)