GitHub

Fork conventional-changelog-conventionalcommits until PRs are merged

Sidvind Eslint sharable config

Yet another ESLint wrapper written in TypeScript.

A stored XSS in the project delete flow allows execution of attacker-controlled JavaScript in an administrator’s browser when the admin attempts to delete a project created by a low-privileged user. This can lead to takeover of the Coolify instance (cookies, API tokens, WebSocket/terminal actions)

A critical Remote Code Execution (RCE) vulnerability exists in Coolify's application deployment workflow. This flaw allows a low-privileged member to inject arbitrary Docker Compose directives during project creation or updates. By defining a malicious service that mounts the host filesystem an attacker can achieve root-level command execution on

Authenticated low-privileged RCE in Coolify via unsanitized shell commands in the Git Repository field.

Authenticated users can upload arbitrary files (e.g. .html, .svg) as profile images in OpenPLC Runtime. These files are publicly accessible without authentication, allowing stored XSS or malicious content delivery .

my CVE

This Maybe A temp repo

🏄 get blocks of balanced pairs, eg: {}, <a></a> or code fences ```

Security vulnerabilities

Kangaroo allows you to find the absolute path of the desired file in parent directories.

Python API for interacting with a Pi-hole instance.

Very simple module that detect if process is started by AVA. Zero dependencies

run a sync/async map function across as many processes as you like

Get a worker or spawned node process to which you can talk using a message channel.

Take async functions from user code, whether they're promise-returning functions, callback-calling functions, or async/await functions

Call a function with a temporary file, and clean up when the function returns!