Rubix982 / ASP.NET-ReactJS-Template

Power template, aimed at being as flexible as possible, for an ASP.NET 5.0 as a backend, and a ReactJS + Typescript + Redux frontend.
https://bit.ly/3rcb0LH
MIT License
7 stars 1 forks source link

[Snyk] Fix for 2 vulnerabilities #337

Open Rubix982 opened 1 month ago

Rubix982 commented 1 month ago

snyk-top-banner

Snyk has created this PR to fix 2 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-RUBY-REXML-7577227
  738  
medium severity Denial of Service (DoS)
SNYK-RUBY-REXML-7577228
  631  

[!IMPORTANT]

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: ๐Ÿง View latest project report ๐Ÿ“œ Customise PR templates ๐Ÿ›  Adjust project settings ๐Ÿ“š Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

๐Ÿฆ‰ Uncontrolled Resource Consumption ('Resource Exhaustion')

CLAassistant commented 1 month ago

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

guardrails[bot] commented 1 month ago

:warning: We detected 1 security issue in this pull request:

Vulnerable Libraries (1)
Severity | Details :-: | :-- Informational | [pkg:gem/github-pages@231](https://github.com/Rubix982/ASP.NET-ReactJS-Template/blob/9028bd885cbf85ccf88912fc002649f4a66938b5/docs/Gemfile.lock#L44) upgrade to: *> 231* More info on how to fix Vulnerable Libraries in [Ruby](https://docs.guardrails.io/docs/en/vulnerabilities/ruby/using_vulnerable_libraries.html?utm_source=ghpr).

๐Ÿ‘‰ Go to the dashboard for detailed results.

๐Ÿ“ฅ Happy? Share your feedback with us.