tuanductran/spacedrive

Spacedrive is an open source cross-platform file explorer, powered by a virtual distributed filesystem written in Rust.

Greetings!

Welcome to my space! I am Tran Tuan Duc, a dedicated Front-End Developer specializing in Vue.js and Nuxt.js. My passion lies in crafting dynamic, responsive, and high-performance web applications that deliver exceptional user experiences.

About Me

const myInfo = {
  name: 'Tran Tuan Duc',
  jobTitle: 'Front-End Developer',
  skills: {
    core: ['HTML', 'CSS', 'JavaScript'],
    frameworks: ['Vue.js', 'Nuxt.js'],
    design: ['Figma', 'Bootstrap', 'Tailwind CSS'],
    wordpress: ['Elementor', 'Page Builders'],
    os: ['Windows', 'Linux', 'macOS']
  },
  careerObjective: {
    primary: 'Front-End Development with Vue.js',
    secondary: 'WordPress Back-End Development'
  },
  socialMedia: {
    twitter: 'tuanducdesigner',
    linkedin: 'tuanductran',
    devTo: 'tuanductran',
    instagram: 'tuanductran.dev'
  }
}

Professional Statistics

• 📅 Account Age: 3 years.
• 💻 Total Commits: 5716
• 📝 Issues Opened: 41
• 🚀 Pull Requests: 70
• 🔍 Code Reviews: 2
• ⭐ Stars Received: 60
• 📚 Repositories Owned: 57
• 🤝 Repositories Contributed: 23

Top 5 most used languages across my repositories

Statistics are generated with teoxoy/profile-readme-stats

spacedrive's Issues

undici-5.27.2.tgz: 1 vulnerabilities (highest severity is: 3.9)

Vulnerable Library - undici-5.27.2.tgz

Library home page: https://registry.npmjs.org/undici/-/undici-5.27.2.tgz

Path to dependency file: /scripts/package.json

Path to vulnerable library: /scripts/node_modules/undici/package.json

Vulnerabilities

CVE	Severity	CVSS	Dependency	Type	Fixed in (undici version)	Remediation Possible**
CVE-2024-24758	Low	3.9	undici-5.27.2.tgz	Direct	5.28.3	❌

**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation

Details

CVE-2024-24758

Vulnerable Library - undici-5.27.2.tgz

Library home page: https://registry.npmjs.org/undici/-/undici-5.27.2.tgz

Path to dependency file: /scripts/package.json

Path to vulnerable library: /scripts/node_modules/undici/package.json

Dependency Hierarchy:

• ❌ undici-5.27.2.tgz (Vulnerable Library)

Found in base branch: main

Vulnerability Details

Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear Proxy-Authentication headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Publish Date: 2024-02-16

URL: CVE-2024-24758

CVSS 3 Score Details (3.9)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: High
  • User Interaction: Required
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: Low
  • Integrity Impact: Low
  • Availability Impact: Low

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://www.cve.org/CVERecord?id=CVE-2024-24758

Release Date: 2024-02-16

Fix Resolution: 5.28.3

Step up your Open Source Security Game with Mend here