{"action":"created","issue":{"url":"https://api.github.com/repos/DIYgod/RSSHub/issues/262","repository_url":"https://api.github.com/repos/DIYgod/RSSHub","labels_url":"https://api.github.com/repos/DIYgod/RSSHub/issues/262/labels{/name}","comments_url":"https://api.github.com/repos/DIYgod/RSSHub/issues/262/comments","events_url":"https://api.github.com/repos/DIYgod/RSSHub/issues/262/events","html_url":"https://github.com/DIYgod/RSSHub/issues/262","id":328813459,"node_id":"MDU6SXNzdWUzMjg4MTM0NTk=","number":262,"title":"安装时，提示\"found 3 vulnerabilities (1 low, 2 high)\"","user":{"login":"yingziwu","id":22741471,"node_id":"MDQ6VXNlcjIyNzQxNDcx","avatar_url":"https://avatars2.githubusercontent.com/u/22741471?v=4","gravatar_id":"","url":"https://api.github.com/users/yingziwu","html_url":"https://github.com/yingziwu","followers_url":"https://api.github.com/users/yingziwu/followers","following_url":"https://api.github.com/users/yingziwu/following{/other_user}","gists_url":"https://api.github.com/users/yingziwu/gists{/gist_id}","starred_url":"https://api.github.com/users/yingziwu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yingziwu/subscriptions","organizations_url":"https://api.github.com/users/yingziwu/orgs","repos_url":"https://api.github.com/users/yingziwu/repos","events_url":"https://api.github.com/users/yingziwu/events{/privacy}","received_events_url":"https://api.github.com/users/yingziwu/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-06-03T09:24:04Z","updated_at":"2018-06-03T09:48:28Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"安装时，提示\"found 3 vulnerabilities (1 low, 2 high)\"\r\n\r\nversion:fb82a648a48e117dcd2cdf9d546204f2e3de49e5\r\n\r\n```\r\n$ npm install\r\nnpm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.4 (node_modules/fsevents):\r\nnpm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.4: wanted {\"os\":\"darwin\",\"arch\":\"any\"} (current: {\"os\":\"linux\",\"arch\":\"x64\"})\r\n\r\nremoved 57 packages, updated 5 packages and audited 11788 packages in 50.898s\r\nfound 3 vulnerabilities (1 low, 2 high)\r\n  run `npm audit fix` to fix them, or `npm audit` for details\r\n\r\n$ npm audit fix\r\nnpm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.4 (node_modules/fsevents):\r\nnpm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.4: wanted {\"os\":\"darwin\",\"arch\":\"any\"} (current: {\"os\":\"linux\",\"arch\":\"x64\"})\r\n\r\nup to date in 33.889s\r\nfixed 0 of 3 vulnerabilities in 11788 scanned packages\r\n  3 vulnerabilities required manual review and could not be updated\r\n\r\n$ npm audit\r\n\r\n                       === npm audit security report ===\r\n\r\n┌──────────────────────────────────────────────────────────────────────────────┐\r\n│                                Manual Review                                 │\r\n│            Some vulnerabilities require your attention to resolve            │\r\n│                                                                              │\r\n│         Visit https://go.npm.me/audit-guide for additional guidance          │\r\n└──────────────────────────────────────────────────────────────────────────────┘\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ High          │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ string                                                       │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Patched in    │ No patch available                                           │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ vuepress [dev]                                               │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ vuepress > markdown-it-anchor > string                       │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/536                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ High          │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ string                                                       │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Patched in    │ No patch available                                           │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ vuepress [dev]                                               │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ vuepress > markdown-it-table-of-contents > string            │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/536                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\n┌───────────────┬──────────────────────────────────────────────────────────────┐\r\n│ Low           │ Regular Expression Denial of Service                         │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Package       │ debug                                                        │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Patched in    │ >= 2.6.9 < 3.0.0 || >= 3.1.0                                 │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Dependency of │ readall                                                      │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ Path          │ readall > debug                                              │\r\n├───────────────┼──────────────────────────────────────────────────────────────┤\r\n│ More info     │ https://nodesecurity.io/advisories/534                       │\r\n└───────────────┴──────────────────────────────────────────────────────────────┘\r\nfound 3 vulnerabilities (1 low, 2 high) in 11788 scanned packages\r\n  3 vulnerabilities require manual review. See the full report for details.\r\n\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/DIYgod/RSSHub/issues/comments/394150207","html_url":"https://github.com/DIYgod/RSSHub/issues/262#issuecomment-394150207","issue_url":"https://api.github.com/repos/DIYgod/RSSHub/issues/262","id":394150207,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NDE1MDIwNw==","user":{"login":"yingziwu","id":22741471,"node_id":"MDQ6VXNlcjIyNzQxNDcx","avatar_url":"https://avatars2.githubusercontent.com/u/22741471?v=4","gravatar_id":"","url":"https://api.github.com/users/yingziwu","html_url":"https://github.com/yingziwu","followers_url":"https://api.github.com/users/yingziwu/followers","following_url":"https://api.github.com/users/yingziwu/following{/other_user}","gists_url":"https://api.github.com/users/yingziwu/gists{/gist_id}","starred_url":"https://api.github.com/users/yingziwu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yingziwu/subscriptions","organizations_url":"https://api.github.com/users/yingziwu/orgs","repos_url":"https://api.github.com/users/yingziwu/repos","events_url":"https://api.github.com/users/yingziwu/events{/privacy}","received_events_url":"https://api.github.com/users/yingziwu/received_events","type":"User","site_admin":false},"created_at":"2018-06-03T09:48:28Z","updated_at":"2018-06-03T09:48:28Z","author_association":"CONTRIBUTOR","body":"上面是用github搜索本仓库的结果。\r\n\r\n所用代码，可以`npm install`后，用下面的命令进行搜索。\r\n```\r\nfind . -name \"*.js\" -type f -exec grep --color -H -n -E \"underscore|unescapeHTML\" {} \\;\r\n```"}}
{"actor":{"display_login":"yingziwu"}}