Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix security vulnerable #144

Open
tuhuynh27 opened this issue Jun 2, 2022 · 2 comments
Open

Fix security vulnerable #144

tuhuynh27 opened this issue Jun 2, 2022 · 2 comments
Assignees
Labels
good first issue Good for newcomers help wanted Extra attention is needed

Comments

@tuhuynh27
Copy link
Member

Ref https://sbom.lift.sonatype.com/report/T1-a0368c8f29fdaa555824-50fd4d271d4cd6-1654147467-65aca49581bd41a8bf5271541c79c207

@tuhuynh27 tuhuynh27 added help wanted Extra attention is needed good first issue Good for newcomers labels Jun 2, 2022
@TuanHungVU1202
Copy link
Collaborator

  • [sonatype-2020-0926] CWE-379: Creation of Temporary File in Directory with Incorrect Permissions
  • [CVE-2022-24823] CWE-668: Exposure of Resource to Wrong Sphere
  • [sonatype-2020-0026] CWE-300: Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

Let me try looking into these issues

@tuhuynh27
Copy link
Member Author

Thanks @TuanHungVU1202 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue Good for newcomers help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants