We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
检测到 Hquestion/easySign 一共引入了442个开源组件,存在33个漏洞
漏洞标题:Systeminformation 操作系统命令注入漏洞 缺陷组件:systeminformation@4.21.1 漏洞编号:CVE-2021-21315 漏洞描述:Systeminformation中存在操作系统命令注入漏洞,该漏洞源于外部输入数据构造操作系统可执行命令过程中,网络系统或产品未正确过滤其中的特殊字符、命令等。攻击者可利用该漏洞执行非法操作系统命令。 影响范围:(∞, 4.34.11) 最小修复版本:4.34.11 缺陷组件引入路径:easysign@0.0.0->pm2@4.2.3->systeminformation@4.21.1
另外还有33个漏洞,详细报告:https://mofeisec.com/jr?p=i30f48
The text was updated successfully, but these errors were encountered:
@Hquestion,同学,您好,上面的漏洞报告是我IDE运行时,安全插件提示您这个项目存在的几个漏洞的报告,辛苦您修复一下哈,担心其他人也会用到你这个项目,从而引入这些漏洞。:)
Sorry, something went wrong.
No branches or pull requests
检测到 Hquestion/easySign 一共引入了442个开源组件,存在33个漏洞
另外还有33个漏洞,详细报告:https://mofeisec.com/jr?p=i30f48
The text was updated successfully, but these errors were encountered: