pras75299/e-commerce

E-commerce project in React

💫 About Me:

🔭 I’m currently focused on developing with Next.js, Node.js, Express, and MongoDB.
👯 I’m eager to collaborate on full-stack MERN projects.
🤝 I’m seeking assistance with database management.
🌱 I’m actively learning about WebSockets and backend system architectures.
💬 Feel free to ask me about anything related to frontend technologies.
⚡ My professional journey began in design, progressed to frontend development, and I have now expanded my expertise to full-stack development.

🌐 Socials:

💻 Tech Stack:

📊 GitHub Stats:

✍️ Random Dev Quote

🔝 Top Contributed Repo

💰 You can help me by Donating

e-commerce's Issues

同学，您这个项目引入了1490个开源组件，存在21个漏洞，辛苦升级一下

检测到 pras75299/E-commerce 一共引入了1490个开源组件，存在21个漏洞

漏洞标题：Npm Node-tar 后置链接漏洞
缺陷组件：[email protected]
漏洞编号：CVE-2021-37701
漏洞描述：node-tar是一款用于文件压缩/解压缩的软件包。
Npm Node-tar 中存在后置链接漏洞，该漏洞源于产品未对特殊字符做有效验证。攻击者可通过该漏洞在其他路径创建恶意文件。
影响范围：[6.0.0, 6.1.7)
最小修复版本：6.1.7
缺陷组件引入路径：[email protected]>[email protected]>[email protected]>[email protected]>[email protected]
[email protected]>[email protected]>[email protected]>[email protected]>[email protected]>[email protected]

另外还有21个漏洞，详细报告：https://mofeisec.com/jr?p=i5081b