Giter VIP home page Giter VIP logo

neoss's Introduction

neoss's People

Contributors

dependabot[bot] avatar mend-bolt-for-github[bot] avatar pablolec avatar snyk-bot avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

neoss's Issues

Intermittently crash when refreshing

Hi! @PabloLec

Sometimes, a crash occurs while using your awesome project.
The crash occurs when I refresh statistics by clicking r

Here is some call stacks

Error: getHostByAddr EINVAL syd09s13-in-f164.1e100.net
    at ResolverBase.getHostByAddr (node:internal/dns/callback_resolver:74:20)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:69:31
    at Generator.next (<anonymous>)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:8:71
    at new Promise (<anonymous>)
    at __awaiter (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:4:12)
    at reverseNSLookup (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:67:12)
    at Object.<anonymous> (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:44:15)
    at Generator.next (<anonymous>)
    at fulfilled (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:5:58)
❯ neoss
Error: getHostByAddr EINVAL bns1.hananet.net
    at ResolverBase.getHostByAddr (node:internal/dns/callback_resolver:74:20)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:69:31
    at Generator.next (<anonymous>)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:8:71
    at new Promise (<anonymous>)
    at __awaiter (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:4:12)
    at reverseNSLookup (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:67:12)
    at Object.<anonymous> (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:44:15)
    at Generator.next (<anonymous>)
    at fulfilled (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:5:58)
❯ neoss
Error: getHostByAddr EINVAL kix06s05-in-f14.1e100.net
    at ResolverBase.getHostByAddr (node:internal/dns/callback_resolver:74:20)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:69:31
    at Generator.next (<anonymous>)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:8:71
    at new Promise (<anonymous>)
    at __awaiter (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:4:12)
    at reverseNSLookup (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:67:12)
    at Object.<anonymous> (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:44:15)
    at Generator.next (<anonymous>)
    at fulfilled (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:5:58)
❯ neoss
Error: getHostByAddr EINVAL ec2-3-90-158-208.compute-1.amazonaws.com
    at ResolverBase.getHostByAddr (node:internal/dns/callback_resolver:74:20)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:69:31
    at Generator.next (<anonymous>)
    at /usr/local/lib/node_modules/neoss/build/utils/getStats.js:8:71
    at new Promise (<anonymous>)
    at __awaiter (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:4:12)
    at reverseNSLookup (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:67:12)
    at Object.<anonymous> (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:44:15)
    at Generator.next (<anonymous>)
    at fulfilled (/usr/local/lib/node_modules/neoss/build/utils/getStats.js:5:58)

It looks like an exception occur during resolving DNS.

Here is my computer environment

❯ node -v
v18.18.2
❯ npm -v
9.8.1
❯ lsb_release -a
No LSB modules are available.
Distributor ID:	Ubuntu
Description:	Ubuntu 22.04 LTS
Release:	22.04
Codename:	jammy
❯ uname -a
Linux unknown-ubuntu 6.2.0-39-generic #40~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Nov 16 10:53:04 UTC 2 x86_64 x86_64 x86_64 GNU/Linux

It's okay to fix it yourself, but if you can't reproduce it, just tell me how to run the project locally and I'll try to debug it. :)

cheerio-1.0.0-rc.10.tgz: 1 vulnerabilities (highest severity is: 7.5) - autoclosed

Vulnerable Library - cheerio-1.0.0-rc.10.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/nth-check/package.json

Found in HEAD commit: 418ce93ab8fb6174d72a5eb6ddbd697f7085955a

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in Remediation Available
CVE-2021-3803 High 7.5 nth-check-2.0.0.tgz Transitive N/A

Details

CVE-2021-3803

Vulnerable Library - nth-check-2.0.0.tgz

Parses and compiles CSS nth-checks to highly optimized functions.

Library home page: https://registry.npmjs.org/nth-check/-/nth-check-2.0.0.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/nth-check/package.json

Dependency Hierarchy:

  • cheerio-1.0.0-rc.10.tgz (Root Library)
    • cheerio-select-1.5.0.tgz
      • css-select-4.1.3.tgz
        • nth-check-2.0.0.tgz (Vulnerable Library)

Found in HEAD commit: 418ce93ab8fb6174d72a5eb6ddbd697f7085955a

Found in base branch: main

Vulnerability Details

nth-check is vulnerable to Inefficient Regular Expression Complexity

Publish Date: 2021-09-17

URL: CVE-2021-3803

CVSS 3 Score Details (7.5)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: None
    • Integrity Impact: None
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: fb55/nth-check@v2.0.0...v2.0.1

Release Date: 2021-09-17

Fix Resolution: nth-check - v2.0.1

Step up your Open Source Security Game with WhiteSource here

Error when starting neoss: no such user

I'm trying to add neoss to nixpkgs and already built it with nix
but when I'm starting it, it exits with an error:

id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
id: ‘100’: no such user
Error: Command failed: id -nu 100
id: ‘100’: no such user

    at checkExecSyncError (node:child_process:890:11)
    at execSync (node:child_process:962:15)
    at /nix/store/76lm8r14qxk3r93wwj50jym69l06dvxq-neoss-1.1.10/lib/node_modules/neoss/build/utils/users.js:83:50
    at Generator.next (<anonymous>)
    at /nix/store/76lm8r14qxk3r93wwj50jym69l06dvxq-neoss-1.1.10/lib/node_modules/neoss/build/utils/users.js:8:71
    at new Promise (<anonymous>)
    at __awaiter (/nix/store/76lm8r14qxk3r93wwj50jym69l06dvxq-neoss-1.1.10/lib/node_modules/neoss/build/utils/users.js:4:12)
    at getUserData (/nix/store/76lm8r14qxk3r93wwj50jym69l06dvxq-neoss-1.1.10/lib/node_modules/neoss/build/utils/users.js:72:12)
    at /nix/store/76lm8r14qxk3r93wwj50jym69l06dvxq-neoss-1.1.10/lib/node_modules/neoss/build/utils/getStats.js:53:58

npm: package.json missing

from running npm install -g neoss

cli output

npm ERR! Could not install from ".nvm/versions/node/v12.22.6/lib/node_modules/neoss/src" as it does not contain a package.json file.

npm log

fetchPackageMetaData error for src@file:src Could not install from ".nvm/versions/node/v12.22.6/lib/node_modules/neoss/src" as it does not contain a package.json file.

whois-json-2.1.0.tgz: 1 vulnerabilities (highest severity is: 9.1)

Vulnerable Library - whois-json-2.1.0.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ip/package.json

Found in HEAD commit: 7fcec78a201d54a5dc68fb999368a5fa5ded3702

Vulnerabilities

CVE Severity CVSS Dependency Type Fixed in (whois-json version) Remediation Possible**
CVE-2024-29415 Critical 9.1 ip-2.0.1.tgz Transitive N/A*

*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

CVE-2024-29415

Vulnerable Library - ip-2.0.1.tgz

Library home page: https://registry.npmjs.org/ip/-/ip-2.0.1.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/ip/package.json

Dependency Hierarchy:

  • whois-json-2.1.0.tgz (Root Library)
    • whois-2.14.0.tgz
      • socks-2.7.1.tgz
        • ip-2.0.1.tgz (Vulnerable Library)

Found in HEAD commit: 7fcec78a201d54a5dc68fb999368a5fa5ded3702

Found in base branch: main

Vulnerability Details

The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.

Publish Date: 2024-05-27

URL: CVE-2024-29415

CVSS 3 Score Details (9.1)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Network
    • Attack Complexity: Low
    • Privileges Required: None
    • User Interaction: None
    • Scope: Unchanged
  • Impact Metrics:
    • Confidentiality Impact: High
    • Integrity Impact: High
    • Availability Impact: None

For more information on CVSS3 Scores, click here.

Step up your Open Source Security Game with Mend here

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.