Comments (8)
yetingli
commented on August 10, 2024
1
Thanks @evdama and @JamieSlome . I have submitted my reports, please check them out.
https://www.huntr.dev/bounties/8582ef0e-6ea1-40a3-8de0-30c53dbc76af/
https://www.huntr.dev/bounties/12462790-03b6-4e36-a5af-383914747a1c
from is.js.
evdama
commented on August 10, 2024
@zidingz I've forked and migrated the entire codebase to ES6... maybe the issue is therefore gone?
Let's have a look and let me know please https://github.com/evdama/is-it-check
from is.js.
JamieSlome
commented on August 10, 2024
@evdama - potentially. You can find three reports we have received against this repository here:
https://huntr.dev/bounties/29bcb9c4-bf34-40a9-bf3e-34645c62789c
https://huntr.dev/bounties/4bedb324-6fed-422e-b4b8-3624d09ca686
https://huntr.dev/bounties/56380c87-a124-4686-8db7-1e4e42514f64
They are all private and only accessible to maintainers with repository write permissions ๐ Let me know if you have any questions.
from is.js.
evdama
commented on August 10, 2024
Ok, I see, I've forked the repo to https://github.com/evdama/is-it-check and upgraded it etc.
Therefore I don't seem to have access to the three links you provided right?
Can you maybe go to my forked repo and create the bounties again because then I have owner permissions which then means I can access the bounty report on huntr.dev?
โฆOn Fri, Mar 18, 2022 at 12:39 PM Jamie Slome ***@***.***> wrote:
@evdama <https://github.com/evdama> - potentially. You can find three
reports we have received against this repository here:
https://huntr.dev/bounties/29bcb9c4-bf34-40a9-bf3e-34645c62789c
https://huntr.dev/bounties/4bedb324-6fed-422e-b4b8-3624d09ca686
https://huntr.dev/bounties/56380c87-a124-4686-8db7-1e4e42514f64
They are all private and only accessible to maintainers with repository
write permissions ๐ Let me know if you have any questions.
โ
Reply to this email directly, view it on GitHub
<#324 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AJMM2BEMX36FY5OISW7RQ73VARTNTANCNFSM5C54RBKQ>
.
Triage notifications on the go with GitHub Mobile for iOS
<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675>
or Android
<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.
You are receiving this because you were mentioned.Message ID:
***@***.***>
from is.js.
JamieSlome
commented on August 10, 2024
Ah, I see!
We would require our researchers to therefore submit vulnerabilities against your repository.
@yetingli and @ready-research - if you want, you are both welcome to submit your reports to the forked repository, given that the vulnerability exists ๐
from is.js.
evdama
commented on August 10, 2024
First one is fixed now
from is.js.
evdama
commented on August 10, 2024
Second one is fixed too... issue can be closed
from is.js.
ewrayjohnson
commented on August 10, 2024
So what is the solution for those of us who use packages that are dependent on the original? Is there a PR? Does someone even have authority to approve/merge an PR?
from is.js.
Related Issues (20)
- Feature: Support for identify IOS 13 HOT 1
- logical && and logical || HOT 2
- is.chrome() environment check invalid for Chrome 77 - macOS (Mojave)
- is.tablet() returns false on iPad HOT 4
- is.number returns True for `Infinity` and `-Infinity` HOT 2
- documentation for `is.palindrome` should explain limitation HOT 1
- This lib do nots work in Vue.js HOT 2
- is.empty(undefined) returns false
- is.edge() returns false in edge (tested on windows and mac os) HOT 3
- is.chrome() returns true in edge HOT 2
- Getting error when checking if window is defined HOT 4
- How to import this into webpack or laravel-mix?
- Security Issue: Request for contact HOT 5
- is.safari() return true in MS Edge browser HOT 2
- TypeScript support? HOT 6
- is.chrome() return true in MS Edge browser and is.not.edge() return true in MS edge as well.
- Contributing new features? HOT 2
- Vulnerability
- npm.js ๅฎ็ฝไธ ๅๅธ็็ๆฌๆฏ 0.9.0๏ผไปฃ็ ไธ็็ๆฌๆฏ 0.8.0
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ๐๐๐
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google โค๏ธ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from is.js.