klinsmaya/sub2api
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/sub2api.git synced 2026-11-10 19:36:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: address batch image ci failures

Browse Source
This commit is contained in:
Turtle_Li
2026-07-07 10:50:36 +08:00
parent 89edba8028
commit aff148167c
11 changed files with 63 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/audit-exceptions.yml
+2 -2
View File
@@ -5,14 +5,14 @@ exceptions:
severity: high
reason: "Admin export only; switched to dynamic import to reduce exposure (CVE-2023-30533)"
mitigation: "Load only on export; restrict export permissions and data scope"
expires_on: "2026-07-06"
expires_on: "2026-08-06"
owner: "security@your-domain"
- package: xlsx
advisory: "GHSA-5pgg-2g8v-p4x9"
severity: high
reason: "Admin export only; switched to dynamic import to reduce exposure (CVE-2024-22363)"
mitigation: "Load only on export; restrict export permissions and data scope"
expires_on: "2026-07-06"
expires_on: "2026-08-06"
owner: "security@your-domain"
- package: lodash
advisory: "GHSA-r5fr-rjxr-66jc"