奇安信CodeSafe issues

Results 348 issues of


                                            奇安信CodeSafe

There is a vulnerability in date-and-time 0.12.0,upgrade recommended

https://github.com/alibaba/funcraft/blob/dc34bb754a887133bf321c7f72e20ed6cc41b112/package-lock.json#L1866-L1870 CVE-2020-26289 Recommended upgrade version：0.14.2

There is a vulnerability in lodash 4.17.15,upgrade recommended

https://github.com/alibaba/funcraft/blob/dc34bb754a887133bf321c7f72e20ed6cc41b112/package-lock.json#L4157-L4161 CVE-2020-8203 Recommended upgrade version：4.17.20

The return value of 'sscanf()' should be checked

https://github.com/alibaba/cloud-kernel/blob/c154e1847809e0ca1f6d92e65a685e066dc20cfa/tools/power/x86/intel-speed-select/isst-config.c#L1344

minor

There is a vulnerability in @angular/core 6.1.0,upgrade recommended

https://github.com/google/data-transfer-project/blob/ef53a7e92ef77a3efe0bdc378262215d0fe7498d/client-rest/package.json#L14-L23 CVE-2021-4231 Recommended upgrade version：11.0.5

There is a vulnerability in Commons IO 2.6,upgrade recommended

https://github.com/google/data-transfer-project/blob/ef53a7e92ef77a3efe0bdc378262215d0fe7498d/extensions/data-transfer/portability-data-transfer-facebook/build.gradle#L28 CVE-2021-29425 Recommended upgrade version：2.7

There is a vulnerability in Jetty: Java based HTTP/1.x, HTTP/2, Servlet, WebSocket Server 9.4.8.v20171121,upgrade recommended

https://github.com/google/data-transfer-project/blob/ef53a7e92ef77a3efe0bdc378262215d0fe7498d/extensions/transport/portability-transport-jettyrest/build.gradle#L31 CVE-2017-7657 CVE-2017-7658 CVE-2021-28165 CVE-2020-27216 CVE-2017-7656 Recommended upgrade version：9.4.43.v20210629

奇安信CodeSafe