JmQu

Braces is marked as DoS vulnerable via Memory Exhaustion by Blackduck

8

With recent scan, we found that braces npm package is marked as DoS vulnerable with high security risk according to `BDSA-2024-2474` from Black Duck Security Advisory. As of now, no...

https://github.com/terlar/fish-tank/blob/master/share/fish-tank/features/reporting.fish#L71-L75 now use `date +%s%N` to get the current time but it cannot work on OS X. So the result of the expression is something like `1516682742N` and this cannot...

Cookie based hmac auth is impossible

2

The hmac auth leverage header value with the below schema to set up the signature. ``` Authorization: Signature keyId="hmac-key-1",algorithm="hmac-sha1",signature="Base64Encode(HMAC-SHA1(signing string))" ``` When passing the same value through cookie instead, the...