Filip Nikolovski

gosec error - Potential DoS vulnerability via decompression

1

When running the tool [gosec](https://github.com/securego/gosec), it throws an error on the generated code, for the G110 rule - Potential DoS vulnerability via decompression bomb. G110 (CWE-409): Potential DoS vulnerability via...

Use io.CopyN when copying compressed data

1

This fixes #49. It's advised to use io.CopyN when copying compressed data in order to avoid a potential DoS vulnerability via decompression bomb.

rules_go doesn't compile org_golang_google_api

2

### What version of rules_go are you using? v0.40.1 ### What version of gazelle are you using? v0.30.0 ### What version of Bazel are you using? 6.2.1 ### Does this...

present: properly render sub-section heading

19

This fixes: https://github.com/golang/go/issues/6846 If we take the example from the readme: ``` # Title of Talk My Name 9 Mar 2020 [email protected] ## Title of Slide or Section (must begin...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...

[Snyk] Security upgrade react-scripts from 4.0.3 to 5.0.0

1

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...

[Snyk] Security upgrade react-scripts from 4.0.3 to 5.0.0

1

This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of...