ServiceInnovationLab/serviceinnovationlab.github.io

View on GitHub

Showing 134 of 135 total issues

Unintended read access in kramdown gem
Open

kramdown (1.17.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Remote code execution in Kramdown
Open

kramdown (1.17.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Block has too many lines. [173/25]
Open

RSpec.describe SiteData::AuthorData do
before do
root = File.dirname(File.dirname(__FILE__))
 
@author_data = described_class.new(root)
Severity: Minor
Found in spec/_plugins/author_data_spec.rb by rubocop

Block has too many lines. [129/25]
Open

RSpec.describe Jekyll::Utility do
class UtilityClass
end
 
before do
Severity: Minor
Found in spec/_plugins/utlity_spec.rb by rubocop

Regular Expression Denial of Service in Addressable templates
Open

addressable (2.7.0)
Severity: Critical
Found in Gemfile.lock by bundler-audit

ReDoS based DoS vulnerability in Active Support’s underscore
Open

activesupport (6.0.3.2)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Integer Overflow or Wraparound in libxml2 affects Nokogiri
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Inefficient Regular Expression Complexity in Nokogiri
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Nokogiri::XML::Schema trusts input by default, exposing risk of an XXE vulnerability
Open

nokogiri (1.10.9)
Severity: Info
Found in Gemfile.lock by bundler-audit

XML Injection in Xerces Java affects Nokogiri
Open

nokogiri (1.10.9)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
Open

nokogiri (1.10.9)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Out-of-bounds Write in zlib affects Nokogiri
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Update packaged dependency libxml2 from 2.9.10 to 2.9.12
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Denial of Service (DoS) in Nokogiri on JRuby
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35)
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Improper Handling of Unexpected Data Type in Nokogiri
Open

nokogiri (1.10.9)
Severity: Critical
Found in Gemfile.lock by bundler-audit

File waypoints.min.js has 479 lines of code (exceeds 250 allowed). Consider refactoring.
Open

// Generated by CoffeeScript 1.6.2
/*
jQuery Waypoints - v2.0.3
Copyright (c) 2011-2013 Caleb Troughton
Dual licensed under the MIT license and GPL license.
Severity: Minor
Found in assets/js/waypoints.min.js - About 7 hrs to fix

    Assignment Branch Condition size for related_posts is too high. [43.91/15]
    Open

    def related_posts(me, posts)
    return [] unless posts.docs.size > 1
     
    highest_freq = @tag_freq.values.max
    related_scores = Hash.new(0)
    Severity: Minor
    Found in _plugins/related_posts.rb by rubocop

    Method has too many lines. [29/10]
    Open

    def related_posts(me, posts)
    return [] unless posts.docs.size > 1
     
    highest_freq = @tag_freq.values.max
    related_scores = Hash.new(0)
    Severity: Minor
    Found in _plugins/related_posts.rb by rubocop
    Severity
    Category
    Status
    Source
    Language