-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: add a wrapper around @nx/js generator
Wrapping some other libraries so we can easily create new vite libraries in one command.
- Loading branch information
Showing
6 changed files
with
671 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -1292,6 +1292,22 @@ | |
"reference": "https://ossindex.sonatype.org/vulnerability/CVE-2023-44270?component-type=npm&component-name=postcss&utm_source=auditjs&utm_medium=integration&utm_content=4.0.41" | ||
} | ||
] | ||
}, | ||
{ | ||
"coordinates": "pkg:npm/[email protected]", | ||
"description": "adds node crypto signing for browsers", | ||
"reference": "https://ossindex.sonatype.org/component/pkg:npm/[email protected]?utm_source=auditjs&utm_medium=integration&utm_content=4.0.41", | ||
"vulnerabilities": [ | ||
{ | ||
"id": "CVE-2023-46234", | ||
"title": "[CVE-2023-46234] CWE-347: Improper Verification of Cryptographic Signature", | ||
"description": "browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.\n", | ||
"cvssScore": 6.5, | ||
"cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", | ||
"cve": "CVE-2023-46234", | ||
"reference": "https://ossindex.sonatype.org/vulnerability/CVE-2023-46234?component-type=npm&component-name=browserify-sign&utm_source=auditjs&utm_medium=integration&utm_content=4.0.41" | ||
} | ||
] | ||
} | ||
], | ||
"ignore": [ | ||
|
@@ -1522,6 +1538,9 @@ | |
}, | ||
{ | ||
"id": "CVE-2023-44270" | ||
}, | ||
{ | ||
"id": "CVE-2023-46234" | ||
} | ||
] | ||
} |
Oops, something went wrong.