Skip to content

[Snyk] Security upgrade debian from 9.5-slim to stretch-20220418-slim - #259

Open
dotam99 wants to merge 1 commit into
mainfrom
snyk-fix-2647d5faa4ee0227c1071de3c1755e86
Open

[Snyk] Security upgrade debian from 9.5-slim to stretch-20220418-slim#259
dotam99 wants to merge 1 commit into
mainfrom
snyk-fix-2647d5faa4ee0227c1071de3c1755e86

Conversation

@dotam99

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

  • translations/ja-JP/content/actions/creating-actions/dockerfile-support-for-github-actions.md

We recommend upgrading to debian:stretch-20220418-slim, as this image has only 85 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

SeverityPriority Score / 1000IssueExploit Maturity
high severity614CVE-2019-3462
SNYK-DEBIAN9-APT-407402
No Known Exploit
medium severity514Out-of-bounds Write
SNYK-DEBIAN9-E2FSPROGS-468975
No Known Exploit
medium severity514Out-of-bounds Write
SNYK-DEBIAN9-E2FSPROGS-540843
No Known Exploit
medium severity514Use of a Broken or Risky Cryptographic Algorithm
SNYK-DEBIAN9-LIBGCRYPT20-1582895
No Known Exploit
medium severity514Loop with Unreachable Exit Condition ('Infinite Loop')
SNYK-DEBIAN9-TAR-312293
No Known Exploit

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@guardrails

Copy link
Copy Markdown

⚠️ We detected 921 security issues in this pull request:

Mode: paranoid | Total findings: 921 | Considered vulnerability: 921

Insecure File Management (206)
DocsDetails
💡Title: Use of non-literal fs filename, Severity: High
const{ data }=frontmatter(fs.readFileSync(homepage,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(dir))return
💡Title: Use of non-literal fs filename, Severity: High
const{ data }=frontmatter(fs.readFileSync(toc,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
constbuffer=fs.readFileSync(absFilePath)
💡Title: Use of non-literal fs filename, Severity: High
filename=>[filename,fs.readFileSync(filename,'utf8')]
💡Title: Use of non-literal require, Severity: High
constmiddleware=require(path.resolve(__dirname,'../middleware',relativePath))
💡Title: Use of non-literal fs filename, Severity: High
constcontent=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(path.join(dist,'react'))){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(path.join(dist,'react'),{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
constcontent=transform(fs.readFileSync(file.path,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.join(dist,file.path),content)
💡Title: Use of non-literal fs filename, Severity: High
module.exports=util.promisify(fs.readFile)
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(schemasPath)
💡Title: Use of non-literal require, Severity: High
constvalue=require(path.join(schemasPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
returnawaitfs.readdir(path.join(__dirname,'indexes'))
💡Title: Use of non-literal fs filename, Severity: High
.then(content=>fs.writeFile(
💡Title: Use of non-literal fs filename, Severity: High
.then(content=>fs.writeFile(
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(cacheFile,JSON.stringify(index,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(
💡Title: Use of non-literal fs filename, Severity: High
constversions=fs.readdirSync(staticDir)
💡Title: Use of non-literal require, Severity: High
set(payloadsPerVersion,payloadPath,formatAsJsonCodeBlock(require(payloadFile)))
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(destDir)){
💡Title: Use of non-literal fs filename, Severity: High
dirStats=fs.statSync(earlyAccessLocalRepoDir)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(sourceDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.symlinkSync(sourceDir,destDir,'junction')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(destDir)){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.lstatSync(destDir).isSymbolicLink()){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.statSync(destDir).isDirectory()){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(earlyAccessContentAndDataFiles)){
💡Title: Use of non-literal fs filename, Severity: High
constoldContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContents)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(variablePath))returnfalse
💡Title: Use of non-literal fs filename, Severity: High
constvariableFileContent=yaml.safeLoad(fs.readFileSync(variablePath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
returnfs.existsSync(`${path.posix.join(earlyAccessData,reusablePath)}.md`)
💡Title: Use of non-literal fs filename, Severity: High
returnfs.existsSync(path.posix.join(earlyAccessImages,imagePath))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(fullPathToArchivalRepo)){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(finalDirectory,{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.posix.join(finalDirectory,'redirects.json'),JSON.stringify(redirectsPerVersion,null,2))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal require, Severity: High
require(path.join(process.cwd(),removeUnusedAssetsScript))
💡Title: Use of non-literal fs filename, Severity: High
constoldContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newSchemaFile)){
💡Title: Use of non-literal require, Severity: High
constpreviews=require(previewsFile)
💡Title: Use of non-literal require, Severity: High
💡Title: Use of non-literal require, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(previewsFile,JSON.stringify(previews,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(changesFile,JSON.stringify(changes,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(objectsFile,JSON.stringify(objects,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(srcDir).forEach(file=>{
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.readdirSync(destDir).length){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(oldDereferencedFile)){
💡Title: Use of non-literal fs filename, Severity: High
constoldDereferencedContent=fs.readFileSync(oldDereferencedFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newDereferencedFile,newDereferenceContent)
💡Title: Use of non-literal require, Severity: High
constdereferencedSchema=require(path.join(process.cwd(),newDereferencedFile))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newDecoratedFile,JSON.stringify(operations,null,2))
💡Title: Use of non-literal fs filename, Severity: High
fs.readdirSync(srcDir).forEach(file=>{
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.readdirSync(destDir).length){
💡Title: Use of non-literal fs filename, Severity: High
constdataContent=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newDataContent)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constreleaseCandidateData=yaml.safeLoad(fs.readFileSync(releaseCandidateYaml,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(releaseCandidateYaml,yaml.safeDump(releaseCandidateData))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(localisedAbsPath,toWrite)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(categoryDir)){
💡Title: Use of non-literal fs filename, Severity: High
constpreviousChangelogString=fs.readFileSync(targetPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(targetPath,JSON.stringify(previousChangelog,null,2))
💡Title: Use of non-literal fs filename, Severity: High
constpreviousUpcomingChanges=yaml.safeLoad(fs.readFileSync(upcomingChangesPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
constpreviousSchemaString=fs.readFileSync(schemaPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filepath,content,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(tempSchemaFilePath,latestSchema)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(tempSchemaFilePath)
💡Title: Use of non-literal fs filename, Severity: High
constinputObjectIncludeFile=fs.readFileSync(path.join(includes,'graphql-input-object.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constobjectIncludeFile=fs.readFileSync(path.join(includes,'graphql-object.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(oldCategoryDir),`directory does not exist: ${oldCategoryDir}`)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(productDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(productTocPath,matter.stringify(content,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
consttocContents=fs.readFileSync(oldProductTocPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(oldProductTocPath,matter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContents)
💡Title: Use of non-literal fs filename, Severity: High
constfileContent=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(markdownFilename,value)
💡Title: Use of non-literal fs filename, Severity: High
if(batchFile&&!fs.existsSync(batchFile)){
💡Title: Use of non-literal fs filename, Severity: High
fs.readFileSync(batchFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constcontents=fs.readFileSync(categoryIndex,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(categoryIndex,frontmatter.stringify(content,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
for(constarticleFileNameoffs.readdirSync(categoryDirPath)){
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(articlePath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(articlePath,frontmatter.stringify(articleContent,articleData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constproductIndexContents=fs.readFileSync(productIndexPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(productIndexPath,frontmatter.stringify(revisedProductIndex,productIndexData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(categoryDirPath,newPath)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(oldFullPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newFullPath,frontmatter.stringify(content,data))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
: fs.unlinkSync(reusablePath)
💡Title: Use of non-literal fs filename, Severity: High
: fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
constenterpriseDatesString=fs.readFileSync(enterpriseDatesFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(enterpriseDatesFile,formattedDatesString)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constreadmeComment=fs.readFileSync(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(template===fs.readFileSync(readme,'utf8')){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(readme,template)
💡Title: Use of non-literal fs filename, Severity: High
constcontent=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,newContent)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constcontents=fs.readFileSync(productIndex,'utf8')// TODO move to async
💡Title: Use of non-literal require, Severity: High
schemaForCurrentVersion: require(`../../lib/graphql/static/schema-${graphqlVersion}`),
💡Title: Use of non-literal require, Severity: High
constwebhookPayloads=require(path.join(process.cwd(),'lib/webhooks'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(fullPath)){
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(fullPath,fs.readFileSync(englishFullPath))
💡Title: Use of non-literal fs filename, Severity: High
fs.appendFileSync(logFile,JSON.stringify(result)+'\n')
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=fs.readFileSync(filePath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filePath,newContents)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(existingFileToCompare)){
💡Title: Use of non-literal fs filename, Severity: High
constexistingImageToCompare=awaitfs.readFileSync(existingFileToCompare)
💡Title: Use of non-literal fs filename, Severity: High
constenterpriseImage=awaitfs.readFileSync(file)
💡Title: Use of non-literal fs filename, Severity: High
if(compareResult===0)fs.unlinkSync(file)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(existingFileToCompare)){
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newDirectoryName)){
💡Title: Use of non-literal fs filename, Severity: High
fs.mkdirSync(newDirectoryName,{recursive: true})
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(file,existingFileToCompare)
💡Title: Use of non-literal fs filename, Severity: High
constnewContents=fs.readFileSync(file,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
letcategoryIndexContent=fs.readFileSync(categoryIndexFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(oldTopicFile))continue
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(newTopicDirectory))fs.mkdirSync(newTopicDirectory)
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(oldTopicFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(`${oldTopicDirectory}/${article}.md`))return
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(`${oldTopicDirectory}/${article}.md`,newArticlePath)
💡Title: Use of non-literal fs filename, Severity: High
constarticleContents=frontmatter(fs.readFileSync(newArticlePath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(newArticlePath,frontmatter.stringify(articleContents.content.trim(),articleContents.data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(`${newTopicDirectory}/index.md`,frontmatter.stringify(topicContent.trim(),data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(categoryIndexFile,categoryIndexContent)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(oldTopicFile)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(imagePath))fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
if(fs.existsSync(imagePath))fs.unlinkSync(imagePath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(imageFullPath)
💡Title: Use of non-literal fs filename, Severity: High
fs.unlinkSync(path.join(process.cwd(),directoryImage))
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(file,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(file,frontmatter.stringify(newContent,data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
const{ data, content }=frontmatter(fs.readFileSync(indexFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(indexFile,frontmatter.stringify('',data,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constglossary=yaml.safeLoad(fs.readFileSync(inputFile,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(sourceDir)){
💡Title: Use of non-literal fs filename, Severity: High
fs.renameSync(sourceDir,destDir)
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(translationFilePath),`file does not exist: ${translationFilePath}`)
💡Title: Use of non-literal fs filename, Severity: High
assert(fs.existsSync(englishFile),`file does not exist: ${englishFile}`)
💡Title: Use of non-literal fs filename, Severity: High
constenglishContent=fs.readFileSync(englishFile,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(translationFilePath,englishContent)
💡Title: Use of non-literal fs filename, Severity: High
constrelativePath=fs.existsSync(pathArg)
💡Title: Use of non-literal require, Severity: High
constschemas=files.map(filename=>require(filename))
💡Title: Use of non-literal fs filename, Severity: High
constschemas=fs.readdirSync(dereferencedPath)
💡Title: Use of non-literal fs filename, Severity: High
if(!fs.existsSync(githubRepoDir)){
💡Title: Use of non-literal require, Severity: High
constschema=require(path.join(dereferencedPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(path.join(dereferencedPath,filename),JSON.stringify(schema,null,2))
💡Title: Use of non-literal require, Severity: High
constschema=require(path.join(dereferencedPath,filename))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(filename,JSON.stringify(operations,null,2))
💡Title: Use of non-literal fs filename, Severity: High
const{ content, data }=matter(fs.readFileSync(fullPath,'utf8'))
💡Title: Use of non-literal fs filename, Severity: High
fs.writeFileSync(fullPath,matter.stringify(content,newData,{lineWidth: 10000}))
💡Title: Use of non-literal fs filename, Severity: High
constfileContents=awaitfs.promises.readFile(fullPath,'utf8')
💡Title: Use of non-literal fs filename, Severity: High
.filter(link=>fs.existsSync(getPath(productDir,link,'index')))
💡Title: Use of non-literal fs filename, Severity: High
constchildEntries=awaitfs.promises.readdir(categoryDir,{withFileTypes: true})
💡Title: Use of non-literal fs filename, Severity: High
constgitignore=fs.readFileSync(gitignorePath,'utf8')
💡Title: Use of non-literal require, Severity: High
constschemaJsonPerVersion=require(`../../lib/graphql/static/schema-${version}`)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.stat(filepath)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.writeFile(newFile,'newvalue: bar')
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.unlink(newFile)
💡Title: Use of non-literal fs filename, Severity: High
awaitfs.writeFile(testTargetPath,previousContents)
💡Title: Use of non-literal fs filename, Severity: High
returnyaml.load(fs.readFileSync(filename,'utf8'),{ filename })
💡Title: Use of non-literal fs filename, Severity: High
consttestDirectory=awaitfs.readdir(pathToTests)
💡Title: Use of non-literal fs filename, Severity: High
💡Title: Use of non-literal fs filename, Severity: High
constfilenames=(awaitfs.readdir(referenceDir))
💡Title: Use of non-literal fs filename, Severity: High
constworkflows=fs.readdirSync(workflowsDir)
💡Title: Use of non-literal fs filename, Severity: High
constdata=yaml.load(fs.readFileSync(fullpath,'utf8'),{ fullpath })
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
expect(awaitfs.stat(eaDir)).toBeTruthy()
💡Title: Use of non-literal fs filename, Severity: High
constrssFeedContent=fs.readFileSync(path.join(process.cwd(),'tests/fixtures/rss-feed.xml'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
pageWithSections: fs.readFileSync(path.join(__dirname,'fixtures/page-with-sections.html'),'utf8'),
💡Title: Use of non-literal fs filename, Severity: High
pageWithoutSections: fs.readFileSync(path.join(__dirname,'fixtures/page-without-sections.html'),'utf8')
💡Title: Use of non-literal fs filename, Severity: High
constfileContent=fs.readFileSync(filename,'utf8')
💡Title: Path Traversal from user input, Severity: High
💡Title: Path Traversal from user input, Severity: High
newHref=path.join('/',languageCode,href)
💡Title: Path Traversal from user input, Severity: High
newHref=path.join('/',languageCode,href)
💡Title: Path Traversal from user input, Severity: High
constmapTopicOrArticlePath=path.posix.join(categoryPath,pathParts[2])
💡Title: Path Traversal from user input, Severity: High
constcategoryPath=removeFPTFromPath(path.posix.join('/','en',req.context.currentVersion,'early-access',pathParts[0],pathParts[1]))
💡Title: Path Traversal from user input, Severity: High
title: product.title
💡Title: Path Traversal from user input, Severity: High
constcategoryPath=removeFPTFromPath(path.posix.join('/',req.context.currentLanguage,req.context.currentVersion,productPath,pathParts[1]))
💡Title: Path Traversal from user input, Severity: High
constproductPath=path.posix.join('/',req.context.currentProduct)
💡Title: Path Traversal from user input, Severity: High
href: removeFPTFromPath(path.posix.join('/',req.context.currentLanguage,req.context.currentVersion,productPath)),
💡Title: Path Traversal from user input, Severity: High
constproxyPath=path.join('/',requestedVersion,assetPath)
💡Title: Path Traversal from user input, Severity: High
consthref=removeFPTFromPath(path.join('/',context.currentLanguage,version,linkPath))

More info on how to fix Insecure File Management in JavaScript.


Insecure Use of Regular Expressions (34)
DocsDetails
💡Title: Regex DOS (ReDOS), Severity: Medium
enterprise: /\/enterprise(?:\/|$|\?)(\d+\.\d+)?/,
💡Title: Regex DOS (ReDOS), Severity: Medium
admin: /enterprise\/(\d+\.\d+\/)?admin\/?/,
💡Title: Regex DOS (ReDOS), Severity: Medium
gheUser: /enterprise\/(\d+\.\d+\/)?user(\/|$|\?)/,
💡Title: Regex DOS (ReDOS), Severity: Medium
enterpriseHomepage: /\/enterprise\/?(\d+\.\d+)?$/,

This comment has been truncated due to comment length limitations, please go to the dashboard for further details.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@dotam99@snyk-bot