rpi-devices

rpi-devices copied to clipboard

检测到 shanghuiyang/rpi-devices 一共引入了63个开源组件，存在1个漏洞 ``` 漏洞标题：go-yaml < 2.2.8拒绝服务漏洞 缺陷组件：gopkg.in/[email protected] 漏洞编号：CVE-2019-11254 漏洞描述：gopkg.in/yaml.v2是go语言中用于处理yaml格式的包。 在2.2.8之前的版本中，处理恶意的yaml数据时，会导致CPU资源耗尽。 漏洞由Kubernetes开发者在fuzz测试中发现并提交修复补丁。 国家漏洞库信息：https://www.cnvd.org.cn/flaw/show/CNVD-2020-35519 影响范围：(∞, 2.2.8) 最小修复版本：2.2.8 缺陷组件引入路径：main@->gopkg.in/[email protected] ``` 另外还有几个漏洞，详细报告：https://mofeisec.com/jr?p=ad2f44

ghost

RGB Led and KY-008 laser

1

I think this is an amazing project. I added code for an RGB LED and the KY-008 laser

JakeFAU

Bumps [golang.org/x/image](https://github.com/golang/image) from 0.0.0-20211028202545-6944b10bf410 to 0.5.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20210423082822-04245dca01da to 0.1.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]