Skip to content

auto-build actions

1bdf6f5
Select commit
Loading
Failed to load commit list.
Open

[Snyk] Upgrade fs-extra from 10.0.1 to 10.1.0 #61

auto-build actions
1bdf6f5
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Apr 17, 2025 in 2s

4 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 3 high
  • 1 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 1 in build-plist-edit/index.js

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain
<script
, which may cause an HTML element injection vulnerability.

Check failure on line 1 in build-plist-edit/index.js

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain
<script
, which may cause an HTML element injection vulnerability.

Check warning on line 1 in build-plist-edit/index.js

See this annotation in the file changed.

Code scanning / CodeQL

Overly permissive regular expression range Medium

Suspicious character range that is equivalent to [0-9:].

Check failure on line 1 in s3-upload/index.js

See this annotation in the file changed.

Code scanning / CodeQL

Incomplete URL substring sanitization High

'
s3.amazonaws.com
' can be anywhere in the URL, and arbitrary hosts may come before or after it.