faizulho / eleventy-blog

Welcome to GitHub Pages

You can use the editor on GitHub to maintain and preview the content for your website in Markdown files.

Whenever you commit to this repository, GitHub Pages will run Jekyll to rebuild the pages in your site, from the content in your Markdown files.

Markdown

Markdown is a lightweight and easy-to-use syntax for styling your writing. It includes conventions for

Syntax highlighted code block

# Header 1
## Header 2
### Header 3

- Bulleted
- List

1. Numbered
2. List

**Bold** and _Italic_ and `Code` text

[Link](url) and ![Image](src)

For more details see GitHub Flavored Markdown.

Jekyll Themes

Your Pages site will use the layout and styles from the Jekyll theme you have selected in your repository settings. The name of this theme is saved in the Jekyll _config.yml configuration file.

Support or Contact

Having trouble with Pages? Check out our documentation or contact support and we’ll help you sort it out.

eleventy-blog's Issues

[DepShield] (CVSS 7.5) Vulnerability due to usage of engine.io:3.5.0

Vulnerabilities

DepShield reports that this application's usage of engine.io:3.5.0 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-36048] Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource c...

---

Occurrences

engine.io:3.5.0 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ browser-sync:2.27.5
              └─ socket.io:2.4.0
                    └─ engine.io:3.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of pug-code-gen:3.0.2

Vulnerabilities

DepShield reports that this application's usage of pug-code-gen:3.0.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

pug-code-gen:3.0.2 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ pug:3.0.2
              └─ pug-code-gen:3.0.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 5.3) Vulnerability due to usage of kind-of:3.2.2

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

---

Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ pretty:2.0.0
              └─ condense-newlines:0.2.1
                    └─ kind-of:3.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of http-proxy:1.18.1

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ browser-sync:2.27.5
              └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of socket.io-parser:3.3.2

Vulnerabilities

DepShield reports that this application's usage of socket.io-parser:3.3.2 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-36049] socket.io-parser before 3.4.1 allows attackers to cause a denial of service (mem...

---

Occurrences

socket.io-parser:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ browser-sync:2.27.5
              └─ browser-sync-ui:2.27.5
                    └─ socket.io-client:2.4.0
                          └─ socket.io-parser:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

---

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ browser-sync:2.27.5
              └─ connect:3.6.6
                    └─ debug:2.6.9
                    └─ finalhandler:1.1.0
                          └─ debug:2.6.9
              └─ resp-modifier:6.0.2
                    └─ debug:2.6.9
              └─ send:0.16.2
                    └─ debug:2.6.9
              └─ serve-index:1.9.1
                    └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.isfinite:3.3.2

Vulnerabilities

DepShield reports that this application's usage of lodash.isfinite:3.3.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

---

Occurrences

lodash.isfinite:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ browser-sync:2.27.5
              └─ portscanner:2.1.1
                    └─ is-number-like:1.0.8
                          └─ lodash.isfinite:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.8

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

ini:1.3.8 is a transitive dependency introduced by the following direct dependency(s):

• @11ty/eleventy:0.12.1
        └─ pretty:2.0.0
              └─ js-beautify:1.14.0
                    └─ config-chain:1.1.13
                          └─ ini:1.3.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}