bgoonz / alternate-blog-theme3 Goto Github PK

View Code? Open in Web Editor NEW

11.0 11.0 3.0 56.54 MB

Aux Blog

Home Page: https://bgoonz-blog-v3-0.netlify.app/

License: MIT License

JavaScript 59.67% Makefile 0.20% SCSS 37.61% HTML 1.13% CSS 1.39%

devops git headless jamstack netlify next nextjs scss static theme webdevelopment website

alternate-blog-theme3's Introduction

Hi 👋, I'm Bryan

➤ 📧 [email protected] ☎️ 551-254-5505

💻WEBSITE💻 ⇄ Portfolio ⇄ Recent Work ⇄ MY DOCS📚

📁DOWNLOAD RESUME📁

Bgoonz

GitHub	Gitlab	Bitbucket	Medium	code pen
Replit	Quora	Redit	webcomponents.dev	dev.to
runkit	Observable Notebooks	npm	stack-exchange	Observable Notebooks
Upwork	Notion	AngelList	StackShare	Plunk	Tealfeed
giphy	kofi	Codewars	Dribble	Glitch	YHYPE
contentful	Netlify	Stackblitz	Vercel	Youtube	Free Code Camp
wordpress	Edabit	Vinmeo	js fiddle	hashnode
Google Developer Profile	Gittee	Wakatime	Hubpages	Gitbook

About me

💻 Check Out My Repos ⬇️

Repo List: CLICK The Arrow Below To See Repo List

===➤(_CLICK TO SEE MORE_)➤

A passionate Web Developer, Electrical Engineer, Musician & Producer

🛠

Languages and Tools:

About Me

🔭 Contract Web Development Duke Energy
🌱 I'm currently learning React/Redux, Python, Java, Express, jQuery
👯 I'm looking to collaborate on Any web audio or open source educational tools.
🤝 I'm looking for help with Learning React
👨‍💻 All of my projects are available at https://bgoonz.github.io/
📝 I regularly write articles on medium && Web-Dev-Resource-Hub
💬 Ask me about Anything:
📫 How to reach me [email protected]
⚡ Fun fact I played Bamboozle Music Festival at the Meadowlands Stadium Complex when I was 14.

i really like music :headphones

What's the most useful business-related book you've ever read?

A Random Walk Down Wall Street

What's your favorite non-business book?

Hitchhiker's Guide To The Galaxy

If money were not an issue, what would you be doing right now?

Designing recording software/hardware and using it

What words of advice would you give your younger self?

Try harder and listen to your parents more (the latter bit of advice would be almost certain to fall on deaf ears lol)

What's the most creative thing you've ever done?

I built a platform that listens to a guitarist's performance and automatically triggers guitar effects at the appropriate time in the song.

Which founders or startups do you most admire?

Is it to basic to say Tesla... I know they're prevalent now but I've been an avid fan since as early as 2012.

What's your super power?

Having really good ideas and forgetting them moments later.

What's the best way for people to get in touch with you?

A text

What aspects of your work are you most passionate about?

Creating things that change my every day life.

What was the most impactful class you took in school?

Modern Physics... almost changed my major after that class... but at the end of the day engineering was a much more fiscally secure avenue.

What's something you wish you had done years earlier?

Learned to code ... and sing

What words of wisdom do you live by?

*Disclaimer: The following wisdom is very cliche ... but... "Be the change that you wish to see in the world."

Mahatma Gandhi

| | ## Portfolio:

netlify

Resume

Bryan Guner

551-254-5505 | [email protected]

⦿===➤Skills

Languages:	JavaScript ES-6, NodeJS, HTML5, CSS3, SCSS, Bash Shell, SQL, MATLAB, Python, C++, Mathematica, JSON
Frameworks / Libraries:	React, Redux, ExpressJS, Gatsby, NextJS, Ant-Design, Loadash, Sequelize, GraphQL, AJAX, Jest, Mocha, jQuery, Electron
Databases:	PostgreSQL, MongoDB, SQlite3
Tools:	Figma, Adobe XD, GitHub, GitLab, Excel, VSCode, Sublime Text, Atom, Google Analytics, Bootstrap, Tailwind, FontAwesome
Tools (continued):	Docker, Firebase, Postman, Wordpress, Chrome Dev Tools, Jira, Trello, Confluence, Firebase, AWS S3, Okta, Algolia, Loadash
Hosting:	Heroku, Netlify, Vercel, Wordpress, Cloudfare, AWS, Firebase, Digital Ocean
Operating Systems:	Linux, Windows (WSL), IOS

⦿===➤Projects

Gatsby GraphQL-Blog Live Site |GitHub

Aweb development blogfeaturing convenient web development tools and interactive content

Implemented 4 Gatsby page models and GraphQL schema to fetch markdown content and feed it into react components.
Designed and integrated a set of convenient web-hosted developer tools and GUI interfaces.
Added interactive content including comments, video conferencing, data-structure visualization, games and full text search.

Autonomously Triggered Guitar Effects Platform** Live Site| GitHub**

Stack: C++ | Python | MATLAB | PureData

Platformdesigned to analyze a time sequence of notes and autonomously trigger guitar effects ata predetermined point in the song

Used pure data to filter a guitar signal before executing frequency domain analysis and implementing custom built guitar effects.
Implemented the Dynamic Time Warping algorithm in C++ and Python to generate a time agnostic measure of similarity between performances.
Autonomously activated or adjusted guitar effects at multiple pre-designated sections of performance.

Data Structures Interactive Teaching ToolLive Site |** GitHub**

Stack: jQuery | ExpressJS | Google Analytics |Algolia Full Text Search | Amazon S3

Awebsitefor visualizing and practicing data structures and algorithms in JavaScript & Python

Implemented an repl.it backend to enable commenting using express and the fs module to write user comments to a storage.json file.
Developed proprietary npm package to recursively walk the project directory structure and generate a site navigation page.
Created multiple embedded data structure visualizations that interact with user input.
Automated the generation and submission of a sitemapto (Google, Bing, and Yandex) on every build.

⦿===➤ Experience

Product Development Engineer | Cembre, Edison, NJ__|Oct 2019 - Mar 2020

Converted client's product needs into technical specs to be sent to the development team in Italy.
Reorganized internal file server structure and conducted system integration and product demonstrations.
Presided over internal and end user software trainings in addition to producing customer facing documentation.
Conducted electrical conductivity & tensile testing of electrical components and presided over troubleshooting railroad hardware and software in North America.

Family Promise Service Tracker

Full Stack Web Development Intern | Remote | Sept 2021 - Present Live Site |GitHub

Anappbuilt to helps local communities provide services to address the root causes of family homelessness

Collaborated on state management using Redux to handle application state and middleware using redux-promise & redux-thunk.
Built two graphic visuals of the user hierarchy and the scope of their permissions as well as maintained the team's docs.
Created Figma UI mockups for possible future developments, such as displaying metrics data and map pinpoint functionality.

⦿===➤ Education

Lambda School , Full Stack Web Development

May 2020 - Nov 2021

Six-month immersive software development course with a focus on full stack web development. Over 2000 hours of work invested including class time, homework, and projects.

B.S. Electrical Engineering , TCNJ, Ewing NJ 2014 – 2019

2 Curriculum link

Knowledge of circuit boards, processors, chips, electronic equipment, and computer hardware and software, including applications and programming.

References & further work experience available upon request.

My Projects

➤ Github Gists

Github Gists

list-of-my-websites

Project Name	Skills used	Description
Web-Dev-Resource-Hub (blog)	Html, Css, javascript, Python, jQuery, React, FireBase, AWS S3, Netlify, Heroku, NodeJS, PostgreSQL, C++, Web Audio API	My blog site contains my resource sharing and blog site ... centered mostly on web development and just a bit of audio production / generally nerdy things I find interesting.
Dynamic Guitar Effects Triggering Using A Modified Dynamic Time Warping Algorithm	C, C++, Python, Java, Pure Data, Matlab	Successfully completed and delivered a platform to digitize a guitar signal and perform filtering before executing frequency & time domain analysis to track a current performance against prerecorded performance.Implemented the Dynamic Time Warping algorithm in C++ and Python to autonomously activate or adjust guitar effect at multiple pre-designated section of performance.
Data Structures & Algorithms Interactive Learning Site	HTML, CSS, Javascript, Python, Java, jQuery, Repl.it-Database API	A interactive and comprehensive guide and learning tool for DataStructures and Algorithms ... concentrated on JS but with some examples in Python, C++ and Java as well
MihirBeg.com	Html, Css, Javascript, Bootstrap, FontAwesome, jQuery	A responsive and mobile friendly content promotion site for an Audio Engineer to engage with fans and potential clients
Tetris-JS	Html, Css, Javascript	The classic game of tetris implemented in plain javascipt and styled with a retro-futureistic theme
Git Html Preview Tool	Git, Javascript, CSS3, HTML5, Bootstrap, BitBucket	Loads HTML using CORS proxy, then process all links, frames, scripts and styles, and load each of them using CORS proxy, so they can be evaluated by the browser.
Mini Project Showcase	HTML, HTML5, CSS, CSS3, Javascript, jQuery	add songs and play music, it also uses to store data in INDEXEDB Database by which we can play songs, if we not clear the catch then song will remain stored in database.

alternate-blog-theme3's People

Contributors

Stargazers

Forkers

bryan-guner-backup danhefrman web-dev-collaborative

alternate-blog-theme3's Issues

CVE-2019-6286 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2019-6286 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/prelexer.hpp

Vulnerability Details

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::parse_import(), a similar issue to CVE-2018-11693.

Publish Date: 2019-01-14

URL: CVE-2019-6286

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2019-07-23

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2021-37699 (Medium) detected in next-10.2.3.tgz

CVE-2021-37699 - Medium Severity Vulnerability

Vulnerable Library - next-10.2.3.tgz

The React Framework

Library home page: https://registry.npmjs.org/next/-/next-10.2.3.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: /node_modules/next/package.json

Dependency Hierarchy:

❌ next-10.2.3.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site. In general, this redirect does not directly harm users although can allow for phishing attacks by redirecting to an attacker's domain from a trusted domain. We recommend everyone to upgrade regardless of whether you can reproduce the issue or not. The issue has been patched in release 11.1.0.

Publish Date: 2021-08-12

URL: CVE-2021-37699

CVSS 3 Score Details (6.1)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Changed
Impact Metrics:
- Confidentiality Impact: Low
- Integrity Impact: Low
- Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-vxf5-wxwp-m7g9

Release Date: 2021-08-12

Fix Resolution: next - 11.1.0

Step up your Open Source Security Game with WhiteSource here

CVE-2021-37713 (High) detected in tar-6.1.0.tgz

CVE-2021-37713 - High Severity Vulnerability

Vulnerable Library - tar-6.1.0.tgz

tar for node

Library home page: https://registry.npmjs.org/tar/-/tar-6.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/tar/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- node-gyp-7.1.2.tgz
  - ❌ tar-6.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be outside of the extraction target directory is not extracted. This is, in part, accomplished by sanitizing absolute paths of entries within the archive, skipping archive entries that contain .. path portions, and resolving the sanitized paths against the extraction target directory. This logic was insufficient on Windows systems when extracting tar files that contained a path that was not an absolute path, but specified a drive letter different from the extraction target, such as C:some\path. If the drive letter does not match the extraction target, for example D:\extraction\dir, then the result of path.resolve(extractionDirectory, entryPath) would resolve against the current working directory on the C: drive, rather than the extraction target directory. Additionally, a .. portion of the path could occur immediately after the drive letter, such as C:../foo, and was not properly sanitized by the logic that checked for .. within the normalized and split portions of the path. This only affects users of node-tar on Windows systems. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. There is no reasonable way to work around this issue without performing the same path normalization procedures that node-tar now does. Users are encouraged to upgrade to the latest patched versions of node-tar, rather than attempt to sanitize paths themselves.

Publish Date: 2021-08-31

URL: CVE-2021-37713

CVSS 3 Score Details (8.6)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Changed
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-5955-9wpr-37jh

Release Date: 2021-08-31

Fix Resolution: tar - 4.4.18, 5.0.10, 6.1.9

Step up your Open Source Security Game with WhiteSource here

CVE-2021-3807 (High) detected in ansi-regex-5.0.0.tgz, ansi-regex-4.1.0.tgz

CVE-2021-3807 - High Severity Vulnerability

Vulnerable Libraries - ansi-regex-5.0.0.tgz, ansi-regex-4.1.0.tgz

ansi-regex-5.0.0.tgz

Regular expression for matching ANSI escape codes

Library home page: https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/ansi-regex/package.json

Dependency Hierarchy:

next-10.2.3.tgz (Root Library)
- react-dev-overlay-10.2.3.tgz
  - strip-ansi-6.0.0.tgz
    - ❌ ansi-regex-5.0.0.tgz (Vulnerable Library)

ansi-regex-4.1.0.tgz

Regular expression for matching ANSI escape codes

Library home page: https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/cliui/node_modules/ansi-regex/package.json,alternate-blog-theme/node_modules/wrap-ansi/node_modules/ansi-regex/package.json,alternate-blog-theme/node_modules/yargs/node_modules/ansi-regex/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- sass-graph-2.2.5.tgz
  - yargs-13.3.2.tgz
    - string-width-3.1.0.tgz
      - strip-ansi-5.2.0.tgz
        
        ❌ ansi-regex-4.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

Publish Date: 2021-09-17

URL: CVE-2021-3807

CVSS 3 Score Details (7.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994/

Release Date: 2021-09-17

Fix Resolution: ansi-regex - 5.0.1,6.0.1

Step up your Open Source Security Game with WhiteSource here

CVE-2018-11697 (High) detected in multiple libraries

CVE-2018-11697 - High Severity Vulnerability

Vulnerable Libraries - opennmsopennms-source-26.0.0-1, CSS::Sassv3.6.0, CSS::Sassv3.6.0

Vulnerability Details

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::Prelexer::exactly() which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.

Publish Date: 2018-06-04

URL: CVE-2018-11697

CVSS 3 Score Details (8.1)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-06-04

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2018-11698 (High) detected in opennmsopennms-source-26.0.0-1

CVE-2018-11698 - High Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/sass_context.cpp

Vulnerability Details

An issue was discovered in LibSass through 3.5.4. An out-of-bounds read of a memory region was found in the function Sass::handle_error which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory causing a denial of service.

Publish Date: 2018-06-04

URL: CVE-2018-11698

CVSS 3 Score Details (8.1)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.5.5

Release Date: 2018-06-04

Fix Resolution: libsass - 3.5.5;node-sass - 4.14.0

Step up your Open Source Security Game with WhiteSource here

CVE-2021-32804 (High) detected in tar-6.1.0.tgz

CVE-2021-32804 - High Severity Vulnerability

Vulnerable Library - tar-6.1.0.tgz

tar for node

Library home page: https://registry.npmjs.org/tar/-/tar-6.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/tar/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- node-gyp-7.1.2.tgz
  - ❌ tar-6.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the preservePaths flag is not set to true. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example /home/user/.bashrc would turn into home/user/.bashrc. This logic was insufficient when file paths contained repeated path roots such as ////home/user/.bashrc. node-tar would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. ///home/user/.bashrc) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.2, 4.4.14, 5.0.6 and 6.1.1. Users may work around this vulnerability without upgrading by creating a custom onentry method which sanitizes the entry.path or a filter method which removes entries with absolute paths. See referenced GitHub Advisory for details. Be aware of CVE-2021-32803 which fixes a similar bug in later versions of tar.

Publish Date: 2021-08-03

URL: CVE-2021-32804

CVSS 3 Score Details (8.1)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-3jfq-g458-7qm9

Release Date: 2021-08-03

Fix Resolution: tar - 3.2.2, 4.4.14, 5.0.6, 6.1.1

Step up your Open Source Security Game with WhiteSource here

CVE-2018-19797 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2018-19797 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/ast.cpp

Vulnerability Details

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast_selectors.cpp) may cause a Denial of Service (application crash) via a crafted sass input file.

Publish Date: 2018-12-03

URL: CVE-2018-19797

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-12-03

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2019-18797 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2019-18797 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/eval.cpp

Vulnerability Details

LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.

Publish Date: 2019-11-06

URL: CVE-2019-18797

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Step up your Open Source Security Game with WhiteSource here

CVE-2018-20822 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2018-20822 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/ast.hpp

Vulnerability Details

LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp).

Publish Date: 2019-04-23

URL: CVE-2018-20822

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.5.5

Release Date: 2019-04-23

Fix Resolution: libsass - 3.5.5;node-sass - 4.14.0

Step up your Open Source Security Game with WhiteSource here

CVE-2018-19839 (Medium) detected in CSS::Sassv3.6.0, CSS::Sassv3.6.0

CVE-2018-19839 - Medium Severity Vulnerability

Vulnerable Libraries - CSS::Sassv3.6.0, CSS::Sassv3.6.0

Vulnerability Details

In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap-based buffer over-read via a crafted sass file.

Publish Date: 2018-12-04

URL: CVE-2018-19839

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-12-04

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2021-37712 (High) detected in tar-6.1.0.tgz

CVE-2021-37712 - High Severity Vulnerability

Vulnerable Library - tar-6.1.0.tgz

tar for node

Library home page: https://registry.npmjs.org/tar/-/tar-6.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/tar/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- node-gyp-7.1.2.tgz
  - ❌ tar-6.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with names containing unicode values that normalized to the same value. Additionally, on Windows systems, long path portions would resolve to the same file system entities as their 8.3 "short path" counterparts. A specially crafted tar archive could thus include a directory with one form of the path, followed by a symbolic link with a different string that resolves to the same file system entity, followed by a file using the first form. By first creating a directory, and then replacing that directory with a symlink that had a different apparent name that resolved to the same entry in the filesystem, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-qq89-hq3f-393p.

Publish Date: 2021-08-31

URL: CVE-2021-37712

CVSS 3 Score Details (8.6)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Changed
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-qq89-hq3f-393p

Release Date: 2021-08-31

Fix Resolution: tar - 4.4.18, 5.0.10, 6.1.9

Step up your Open Source Security Game with WhiteSource here

CVE-2021-37701 (High) detected in tar-6.1.0.tgz

CVE-2021-37701 - High Severity Vulnerability

Vulnerable Library - tar-6.1.0.tgz

tar for node

Library home page: https://registry.npmjs.org/tar/-/tar-6.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/tar/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- node-gyp-7.1.2.tgz
  - ❌ tar-6.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory, where the symlink and directory names in the archive entry used backslashes as a path separator on posix systems. The cache checking logic used both \ and / characters as path separators, however \ is a valid filename character on posix systems. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. Additionally, a similar confusion could arise on case-insensitive filesystems. If a tar archive contained a directory at FOO, followed by a symbolic link named foo, then on case-insensitive file systems, the creation of the symbolic link would remove the directory from the filesystem, but not from the internal directory cache, as it would not be treated as a cache hit. A subsequent file entry within the FOO directory would then be placed in the target of the symbolic link, thinking that the directory had already been created. These issues were addressed in releases 4.4.16, 5.0.8 and 6.1.7. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-9r2w-394v-53qc.

Publish Date: 2021-08-31

URL: CVE-2021-37701

CVSS 3 Score Details (8.6)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Changed
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-9r2w-394v-53qc

Release Date: 2021-08-31

Fix Resolution: tar - 4.4.16, 5.0.8, 6.1.7

Step up your Open Source Security Game with WhiteSource here

CVE-2018-20190 (Medium) detected in opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1

CVE-2018-20190 - Medium Severity Vulnerability

Vulnerable Libraries - opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1

Vulnerability Details

In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial of Service (application crash) via a crafted sass input file.

Publish Date: 2018-12-17

URL: CVE-2018-20190

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-12-17

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

toggle-clock-to -toggle-iframe

  function toggleClock() {
    // get the clock
    var myClock = document.getElementById('clock');

    // get the current value of the clock's display property
    var displaySetting = myClock.style.display;

    // also get the clock button, so we can change what it says
    var clockButton = document.getElementById('clockButton');

    // now toggle the clock and the button text, depending on current state
    if (displaySetting == 'block') {
      // clock is visible. hide it
      myClock.style.display = 'none';
      // change button text
      clockButton.innerHTML = 'Show clock';
    }
    else {
      // clock is hidden. show it
      myClock.style.display = 'block';
      // change button text
      clockButton.innerHTML = 'Hide clock';
    }
  }

CVE-2021-32803 (High) detected in tar-6.1.0.tgz

CVE-2021-32803 - High Severity Vulnerability

Vulnerable Library - tar-6.1.0.tgz

tar for node

Library home page: https://registry.npmjs.org/tar/-/tar-6.1.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/tar/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- node-gyp-7.1.2.tgz
  - ❌ tar-6.1.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the node-tar directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where node-tar checks for symlinks occur. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.

Publish Date: 2021-08-03

URL: CVE-2021-32803

CVSS 3 Score Details (8.1)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-r628-mhmh-qjhw

Release Date: 2021-08-03

Fix Resolution: tar - 3.2.3, 4.4.15, 5.0.7, 6.1.2

Step up your Open Source Security Game with WhiteSource here

CVE-2018-19838 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2018-19838 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/ast.cpp

Vulnerability Details

In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulting from stack consumption via a crafted sass file, as demonstrated by recursive calls involving clone(), cloneChildren(), and copy().

Publish Date: 2018-12-04

URL: CVE-2018-19838

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.5.5

Release Date: 2018-12-04

Fix Resolution: libsass - 3.5.5;node-sass - 4.14.0

Step up your Open Source Security Game with WhiteSource here

CVE-2019-6284 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2019-6284 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/prelexer.hpp

Vulnerability Details

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.

Publish Date: 2019-01-14

URL: CVE-2019-6284

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2020-08-24

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2019-6283 (Medium) detected in opennmsopennms-source-26.0.0-1

CVE-2019-6283 - Medium Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/prelexer.hpp

Vulnerability Details

In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.

Publish Date: 2019-01-14

URL: CVE-2019-6283

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2020-08-24

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2018-19827 (High) detected in opennmsopennms-source-26.0.0-1

CVE-2018-19827 - High Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/expand.cpp

Vulnerability Details

In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial of service (application crash) or possibly have unspecified other impact.

Publish Date: 2018-12-03

URL: CVE-2018-19827

CVSS 3 Score Details (8.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-12-03

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2018-11694 (High) detected in opennmsopennms-source-26.0.0-1

CVE-2018-11694 - High Severity Vulnerability

Vulnerable Library - opennmsopennms-source-26.0.0-1

A Java based fault and performance management system

Library home page: https://sourceforge.net/projects/opennms/

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerable Source Files (1)

/node_modules/node-sass/src/libsass/src/parser.cpp

Vulnerability Details

An issue was discovered in LibSass through 3.5.4. A NULL pointer dereference was found in the function Sass::Functions::selector_append which could be leveraged by an attacker to cause a denial of service (application crash) or possibly have unspecified other impact.

Publish Date: 2018-06-04

URL: CVE-2018-11694

CVSS 3 Score Details (8.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-06-04

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (github>whitesource/merge-confidence:beta)

CVE-2021-33623 (High) detected in trim-newlines-1.0.0.tgz

CVE-2021-33623 - High Severity Vulnerability

Vulnerable Library - trim-newlines-1.0.0.tgz

Trim newlines from the start and/or end of a string

Library home page: https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz

Path to dependency file: alternate-blog-theme/package.json

Path to vulnerable library: alternate-blog-theme/node_modules/trim-newlines/package.json

Dependency Hierarchy:

node-sass-5.0.0.tgz (Root Library)
- meow-3.7.0.tgz
  - ❌ trim-newlines-1.0.0.tgz (Vulnerable Library)

Found in HEAD commit: 7dbb62eabc0f059e337f4a8ac902734d4b79873a

Found in base branch: master

Vulnerability Details

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Publish Date: 2021-05-28

URL: CVE-2021-33623

CVSS 3 Score Details (7.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33623

Release Date: 2021-05-28

Fix Resolution: trim-newlines - 3.0.1, 4.0.1

Step up your Open Source Security Game with WhiteSource here

CVE-2018-20821 (Medium) detected in opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1

CVE-2018-20821 - Medium Severity Vulnerability

Vulnerable Libraries - opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1

Vulnerability Details

The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp).

Publish Date: 2019-04-23

URL: CVE-2018-20821

CVSS 3 Score Details (6.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2019-04-23

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

CVE-2018-11499 (High) detected in multiple libraries

CVE-2018-11499 - High Severity Vulnerability

Vulnerable Libraries - opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1, opennmsopennms-source-26.0.0-1

Vulnerability Details

A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged to cause a denial of service (application crash) or possibly unspecified other impact.

Publish Date: 2018-05-26

URL: CVE-2018-11499

CVSS 3 Score Details (9.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://github.com/sass/libsass/releases/tag/3.6.0

Release Date: 2018-05-26

Fix Resolution: libsass - 3.6.0

Step up your Open Source Security Game with WhiteSource here

Dependency Dashboard

This issue provides visibility into Renovate updates and their statuses. Learn more

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

Detected dependencies

npm

cheatsheet/package.json

algoliasearch 3.35.1

react 16.14.0

react-dom 16.14.0

react-instantsearch-dom 6.19.0

react-scripts 2.1.1

eslint 5.6.0

eslint-config-algolia 20.0.0

eslint-config-prettier 3.6.0

eslint-plugin-import 2.19.1

eslint-plugin-prettier 3.1.2

eslint-plugin-react 7.17.0

prettier 1.19.1

prop-types 15.7.2

package.json

algoliasearch 4.12.0

babel-runtime 6.26.0

classnames 2.3.1

lodash 4.17.21

marked 2.0.6

moment 2.29.1

moment-strftime 0.5.0

next 10.2.3

node-sass 5.0.0

react 17.0.2

react-dom 17.0.2

react-helmet 6.1.0

react-html-parser 2.0.2

react-instantsearch-dom 6.19.0

react-script-tag 1.1.2

sourcebit 0.11.0

sourcebit-source-filesystem 0.2.0

sourcebit-target-next 0.6.2

webpack 5.72.1

prettier 2.5.1

Check this box to trigger a request for Renovate to run again on this repository

bgoonz / alternate-blog-theme3 Goto Github PK

alternate-blog-theme3's Introduction

Hi 👋, I'm Bryan

➤ 📧 [email protected] ☎️ 551-254-5505

💻WEBSITE💻 ⇄ Portfolio ⇄ Recent Work ⇄ MY DOCS📚

Bgoonz

About me

💻 Check Out My Repos ⬇️

Repo List: CLICK The Arrow Below To See Repo List

A passionate Web Developer, Electrical Engineer, Musician & Producer

🛠

Languages and Tools:

i really like music :headphones

What's the most useful business-related book you've ever read?

What's your favorite non-business book?

If money were not an issue, what would you be doing right now?

What words of advice would you give your younger self?

What's the most creative thing you've ever done?

Which founders or startups do you most admire?

What's your super power?

What's the best way for people to get in touch with you?

What aspects of your work are you most passionate about?

What was the most impactful class you took in school?

What's something you wish you had done years earlier?

What words of wisdom do you live by?

Bryan Guner

551-254-5505 | [email protected]

⦿===➤Skills

⦿===➤Projects

⦿===➤ Experience

⦿===➤ Education

Lambda School , Full Stack Web Development

➤ Github Gists

alternate-blog-theme3's People

Contributors

Stargazers

Forkers

alternate-blog-theme3's Issues

CVE-2019-6286 - Medium Severity Vulnerability

CVE-2021-37699 - Medium Severity Vulnerability

CVE-2021-37713 - High Severity Vulnerability

CVE-2021-3807 - High Severity Vulnerability

CVE-2018-11697 - High Severity Vulnerability

CVE-2018-11698 - High Severity Vulnerability

CVE-2021-32804 - High Severity Vulnerability

CVE-2018-19797 - Medium Severity Vulnerability

CVE-2019-18797 - Medium Severity Vulnerability

CVE-2018-20822 - Medium Severity Vulnerability

CVE-2018-19839 - Medium Severity Vulnerability

CVE-2021-37712 - High Severity Vulnerability

CVE-2021-37701 - High Severity Vulnerability

CVE-2018-20190 - Medium Severity Vulnerability

CVE-2021-32803 - High Severity Vulnerability

CVE-2018-19838 - Medium Severity Vulnerability

CVE-2019-6284 - Medium Severity Vulnerability

CVE-2019-6283 - Medium Severity Vulnerability

CVE-2018-19827 - High Severity Vulnerability

CVE-2018-11694 - High Severity Vulnerability

CVE-2021-33623 - High Severity Vulnerability

CVE-2018-20821 - Medium Severity Vulnerability

CVE-2018-11499 - High Severity Vulnerability

Open

Ignored or Blocked

Detected dependencies

Recommend Projects

Recommend Topics

Recommend Org