Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix/vulns and other things #632

Merged
merged 4 commits into from
Jun 10, 2024
Merged

Conversation

RealGoodProgrammer
Copy link
Member

Fixes for vulnerabilities:

  • electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
  • ejs lacks certain pollution protection
  • Denial of service while parsing a tar file due to lack of folders count validation
  • Vite's server.fs.deny did not deny requests for patterns with directories

Fix for OS X runtime error

Copy link

vercel bot commented Jun 6, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
adamant-im ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jun 10, 2024 7:38pm

Copy link

github-actions bot commented Jun 6, 2024

Deployed to https://msg-adamant-pr-632.surge.sh 🚀

@RealGoodProgrammer
Copy link
Member Author

@bludnic bludnic removed the request for review from juliahermak June 7, 2024 13:59
@RealGoodProgrammer RealGoodProgrammer merged commit 7ad5d4b into dev Jun 10, 2024
3 checks passed
@RealGoodProgrammer RealGoodProgrammer deleted the fix/vulns-and-other-things branch June 10, 2024 19:40
Copy link

Successfully tore down https://msg-adamant-pr-632.surge.sh 🥲

@bludnic bludnic mentioned this pull request Jun 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants