lob2018/choux-win

Jeu (PoC) pour Windows 7 et versions ultérieures, réalisé avec Electron (français/anglais)

Hi, I'm Yann 👋

              _                
__      __ __| | ___ ___  _ __ ___   ___  
\ \ /\ / / _ \ |/ __/ _ \| '_ ` _ \ / _ \ 
 \ V  V /  __/ | (_| (_) | | | | | |  __/ 
  \_/\_/ \___|_|\___\___/|_| |_| |_|\___| 
 _                                        
| |_ ___    _ __ ___  _   _               
| __/ _ \  | '_ ` _ \| | | |              
| || (_) | | | | | | | |_| |              
 \__\___/  |_| |_| |_|\__, |              
                      |___/               
  ____ _ _   _   _       _                
 / ___(_) |_| | | |_   _| |__             
| |  _| | __| |_| | | | | '_ \            
| |_| | | |_|  _  | |_| | |_) |           
 \____|_|\__|_| |_|\__,_|_.__/            
                  __ _ _        _         
 _ __  _ __ ___  / _(_) | ___  | |        
| '_ \| '__/ _ \| |_| | |/ _ \ | |        
| |_) | | | (_) |  _| | |  __/ |_|        
| .__/|_|  \___/|_| |_|_|\___| (_)        
|_|                                       
                                          

Table of contents

• About me
• My skills
• My projects
• Contact me

About me

I am a developer with a great passion for software and continuous learning. I specialize in fullstack development.

My skills

Front-End

Back-end

Desktop applications

Data persistence

Modeling methodologies

Agile methodologies and practices

Software and environments

My projects

• Capsa (PoC) 10/2021 : Electron billing application PoC
• Choux-Win (PoC) 08/2020 : Electron arcade game PoC
• Sudoku.exe 05/2019 : C# .NET WPF Sudoku game
• Choux ! - Demo 12/2018 : HTML5 CSS JS arcade game
• Colibris 10/2018 : SEAN library application
• S2J.exe 02/2018 : C# .NET WPF SEO application
• Hatclic.fr 11/2017 : VPS with Drupal website (closed)
• Groupe.exe 03/2016 : JavaFX file management application
• Crypt.exe 08/2015 : JavaFX cryptographic application
• Meteo.exe 06/2015 : JavaFX weather application

Contact me

• Email
• LinkedIn

choux-win's Issues

CVE-2021-33623 (High) detected in trim-newlines-1.0.0.tgz

CVE-2021-33623 - High Severity Vulnerability

Vulnerable Library - trim-newlines-1.0.0.tgz

Trim newlines from the start and/or end of a string

Library home page: https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/trim-newlines/package.json

Dependency Hierarchy:

• @electron-forge/cli-6.0.0-beta.63.tgz (Root Library)
  • @electron-forge/core-6.0.0-beta.63.tgz
    • nugget-2.0.1.tgz
      • pretty-bytes-1.0.4.tgz
        • meow-3.7.0.tgz
          • ❌ trim-newlines-1.0.0.tgz (Vulnerable Library)

Found in HEAD commit: 577a65ccbfab958b5294baa0d616c8f527b4d9f3

Found in base branch: master

Vulnerability Details

The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.

Publish Date: 2021-05-28

URL: CVE-2021-33623

CVSS 3 Score Details (7.5)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: None
  • Integrity Impact: None
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33623

Release Date: 2021-05-28

Fix Resolution: trim-newlines - 3.0.1, 4.0.1

---

Step up your Open Source Security Game with WhiteSource here

CVE-2022-0235 (Medium) detected in node-fetch-2.6.5.tgz - autoclosed

CVE-2022-0235 - Medium Severity Vulnerability

Vulnerable Library - node-fetch-2.6.5.tgz

A light-weight module that brings window.fetch to node.js

Library home page: https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.5.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/node-fetch/package.json

Dependency Hierarchy:

• request-5.6.2.tgz (Root Library)
  • ❌ node-fetch-2.6.5.tgz (Vulnerable Library)

Found in base branch: master

Vulnerability Details

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Publish Date: 2022-01-16

URL: CVE-2022-0235

CVSS 3 Score Details (6.1)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Scope: Changed
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-r683-j2x4-v87g

Release Date: 2022-01-16

Fix Resolution: node-fetch - 2.6.7,3.1.1

---

Step up your Open Source Security Game with WhiteSource here

CVE-2020-7774 (High) detected in y18n-4.0.0.tgz

CVE-2020-7774 - High Severity Vulnerability

Vulnerable Library - y18n-4.0.0.tgz

the bare-bones internationalization library used by yargs

Library home page: https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz

Path to dependency file: Choux-Win/package.json

Path to vulnerable library: Choux-Win/node_modules/mocha/node_modules/y18n/package.json

Dependency Hierarchy:

• mocha-8.2.1.tgz (Root Library)
  • yargs-13.3.2.tgz
    • ❌ y18n-4.0.0.tgz (Vulnerable Library)

Found in HEAD commit: fe93fa8b85ba4edbc9ec352b7c87c980b0efc90c

Found in base branch: master

Vulnerability Details

This affects the package y18n before 5.0.5. PoC by po6ix: const y18n = require('y18n')(); y18n.setLocale('proto'); y18n.updateLocale({polluted: true}); console.log(polluted); // true

Publish Date: 2020-11-17

URL: CVE-2020-7774

CVSS 3 Score Details (7.3)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7774

Release Date: 2020-11-17

Fix Resolution: 5.0.5

---

Step up your Open Source Security Game with WhiteSource here