HR Documentation là một nền tảng chia sẻ các kiến thức và tài liệu về Front End, Back End, Linux và Design dành cho những bạn HR mới bước chân vào nghề tuyển dụng.
Home Page: https://hrpenci.site
License: MIT License
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![depfu[bot] avatar](https://avatars.githubusercontent.com/in/715?v=4 "depfu[bot]")
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "renovate[bot]")
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
These updates are currently rate-limited. Click on a checkbox below to force their creation now.
nextra, nextra-theme-docs)@next/eslint-plugin-next, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, eslint-plugin-react, eslint-plugin-tailwindcss, eslint-plugin-typescript-sort-keys, prettier, prettier-plugin-tailwindcss)@next/env, eslint-config-next, next)@sentry/nextjs, @sentry/profiling-node)These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
@typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint-plugin-unicorn).github/workflows/codeql.yml
actions/checkout v4github/codeql-action v3github/codeql-action v3github/codeql-action v3
package.json
@ducanh2912/next-pwa ^10.0.0@sentry/nextjs ^7.91.0@sentry/profiling-node ^1.3.3clsx ^2.1.0is-absolute-url ^4.0.1mini-svg-data-uri ^1.4.4next ^14.0.4next-seo ^6.4.0next-sitemap ^4.2.3nextra ^2.13.2nextra-theme-docs ^2.13.2nprogress ^0.2.0preact ^10.19.3react ^18.2.0react-dom ^18.2.0react-parallax-tilt ^1.7.177sharp ^0.33.1tailwind-merge ^2.2.0@babel/core ^7.23.7@ianvs/prettier-plugin-sort-imports ^4.1.1@next/env ^14.0.4@next/eslint-plugin-next ^14.0.4@svgr/webpack ^8.1.0@types/node ^20.10.8@types/nprogress ^0.2.3@types/react ^18.2.45@typescript-eslint/eslint-plugin ^6.14.0@typescript-eslint/parser ^6.17.0autoprefixer ^10.4.16cross-env ^7.0.3eslint ^8.56.0eslint-config-next ^14.0.4eslint-config-prettier ^9.1.0eslint-plugin-import ^2.29.1eslint-plugin-react ^7.33.2eslint-plugin-react-hooks ^4.6.0eslint-plugin-tailwindcss ^3.13.1eslint-plugin-typescript-sort-keys ^3.1.0eslint-plugin-unicorn ^50.0.0husky ^8.0.3lint-staged ^15.2.0postcss ^8.4.32postcss-focus-visible ^9.0.1postcss-import ^16.0.0prettier ^3.1.1prettier-plugin-pkg ^0.18.0prettier-plugin-tailwindcss ^0.5.11sass ^1.69.6tailwindcss ^3.4.0typescript ^5.3.3webpack ^5.89.0pnpm 8.14.1
Vulnerable Library - nextra-1.1.0.tgzPath to dependency file: /package.json
Path to vulnerable library: /node_modules/got/package.json
Found in HEAD commit: 0f7cb9daf3eee4198e5a28d7d9a696f38a304ec4
| CVE | Severity |  CVSS |
Dependency | Type | Fixed in (nextra version) | Remediation Available |
|---|---|---|---|---|---|---|
| CVE-2022-33987 |  Medium |
5.3 | got-8.3.2.tgz | Transitive | N/A* | ❌ |
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the section "Details" below to see if there is a version of transitive dependency where vulnerability is fixed.
CVE-2022-33987Simplified HTTP requests
Library home page: https://registry.npmjs.org/got/-/got-8.3.2.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/got/package.json
Dependency Hierarchy:
Found in HEAD commit: 0f7cb9daf3eee4198e5a28d7d9a696f38a304ec4
Found in base branch: production
The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.
Publish Date: 2022-06-18
URL: CVE-2022-33987
Base Score Metrics:
Type: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33987
Release Date: 2022-06-18
Fix Resolution: got - 11.8.5,12.1.0
Step up your Open Source Security Game with Mend here
Vulnerable Library - next-pwa-5.6.0.tgzPath to dependency file: /package.json
Path to vulnerable library: /node_modules/ejs/package.json
| CVE | Severity | CVSS |
Dependency | Type | Fixed in (next-pwa version) | Remediation Available |
|---|---|---|---|---|---|---|
| CVE-2023-29827 |  Medium |
5.5 | ejs-3.1.9.tgz | Transitive | N/A* | ❌ |
*For some transitive vulnerabilities, there is no version of direct dependency with a fix. Check the "Details" section below to see if there is a version of transitive dependency where vulnerability is fixed.
CVE-2023-29827Library home page: https://registry.npmjs.org/ejs/-/ejs-3.1.9.tgz
Path to dependency file: /package.json
Path to vulnerable library: /node_modules/ejs/package.json
Dependency Hierarchy:
Found in base branch: production
ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable, template injection can be implemented through the configuration settings of the closeDelimiter parameter.
Publish Date: 2023-05-04
URL: CVE-2023-29827
Base Score Metrics:
Step up your Open Source Security Game with Mend here
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.