Light

sujithq / cert-renewal Goto Github PK

View Code? Open in Web Editor NEW

1.0 1.0 0.0 90.75 MB

Certification Renewal

Home Page: https://sujithq.github.io/cert-renewal/

License: MIT License

HTML 46.36% C# 4.02% CSS 49.62%

certification renewal

cert-renewal's Introduction

🔗 Connect with me

📃 Bio (Full Version)

Azure Cloud Solutions & Cybersecurity Architect

Azure (Identity and Access) Administrator

Azure DevOps, AI, Security & Network Engineer

Azure (Cosmos DB) Developer

GitHub Certified

GitHub Foundations

GitHub Actions

GitHub Advanced Security

GitHub Admin

GitHub Accredited Trainer For Delivering

GitHub Actions

GitHub for Developers

GitHub Administration

GitHub Advanced Security Gettings Started training

GitHub Migrations

GitHub Enterprise Importer

Github Copilot for Business Fundamentals

Terraform Associate

github contribution grid snake animation

Microsoft Certifications

Microsoft Applied Skills

GitHub Certifications

GitHub Accreditations

GitHub Advanced Security Getting Started

GitHub Copilot for Business Fundamentals

Terraform

Microsoft Learn

Security Journey

Cloud Champion

Azure Data Explorer

Must Learn KQL

AWS

cert-renewal's People

Contributors

Stargazers

Watchers

cert-renewal's Issues

DepShield Deprecation Notice

Depshield will be deprecated on Monday December 12th

Please install our new product, Sonatype Lift with advanced features

microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg: 1 vulnerabilities (highest severity is: 7.5) - autoclosed

Vulnerable Library - microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Development server for use when building Blazor applications.

This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/d47e49e9c1e173ac90821f7e89cc38e710274241

Library home page: https://api.nuget.org/packages/microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Path to dependency file: /CertRenewal/CertRenewal/CertRenewal.csproj

Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.aspnetcore.components.webassembly.devserver/7.0.5/microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Vulnerabilities

CVE	Severity	CVSS	Dependency	Type	Fixed in (microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg version)	Remediation Available
CVE-2023-29331	High	7.5	microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg	Direct	Microsoft.NetCore.App.Runtime.linux-arm - 6.0.18,7.0.7, Microsoft.Windows.Compatibility - 6.0.6,7.0.3, System.Security.Cryptography.Pkcs - 6.0.3,7.0.2	❌

Details

CVE-2023-29331

Vulnerable Library - microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Development server for use when building Blazor applications.

This package was built from the source code at https://github.com/dotnet/aspnetcore/tree/d47e49e9c1e173ac90821f7e89cc38e710274241

Library home page: https://api.nuget.org/packages/microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Path to dependency file: /CertRenewal/CertRenewal/CertRenewal.csproj

Path to vulnerable library: /home/wss-scanner/.nuget/packages/microsoft.aspnetcore.components.webassembly.devserver/7.0.5/microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg

Dependency Hierarchy:

❌ microsoft.aspnetcore.components.webassembly.devserver.7.0.5.nupkg (Vulnerable Library)

Found in base branch: main

Vulnerability Details

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Publish Date: 2023-06-14

URL: CVE-2023-29331

CVSS 3 Score Details (7.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-555c-2p6r-68mm

Release Date: 2023-06-14

Fix Resolution: Microsoft.NetCore.App.Runtime.linux-arm - 6.0.18,7.0.7, Microsoft.Windows.Compatibility - 6.0.6,7.0.3, System.Security.Cryptography.Pkcs - 6.0.3,7.0.2

Step up your Open Source Security Game with Mend here

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

github-actions

.github/workflows/main.yml

actions/checkout v4

gitleaks/gitleaks-action v2

actions/checkout v4

actions/setup-dotnet v4

JamesIves/github-pages-deploy-action v4

nuget

CertRenewal/CertRenewal/CertRenewal.csproj

Microsoft.AspNetCore.Components.WebAssembly.DevServer 8.0.4

Microsoft.AspNetCore.Components.WebAssembly 8.0.4

Check this box to trigger a request for Renovate to run again on this repository

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.