Phylum OSS Supply Chain Risk Analysis - INCOMPLETE WITH FAILURE

The analysis contains 1 package(s) Phylum has not yet processed,
preventing a complete risk analysis. Phylum is processing these
packages currently and should complete soon.
Please wait for up to 30 minutes, then re-run the analysis.

This repository analyzes the risk of new dependencies. An
administrator of this repository has set requirements via Phylum policy.

If you see this comment, one or more dependencies have failed Phylum's risk analysis.

Package: golang.org/x/[email protected] failed.

golang.org/x/[email protected] is vulnerable to Uncontrolled Resource Consumption

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http2 Denial of Service vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http vulnerable to ping floods

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http vulnerable to a reset flood

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html NULL Pointer Dereference vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html Improper Validation of Array Index vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html Infinite Loop vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http2/h2c vulnerable to request smuggling attack

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html NULL Pointer Dereference vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to x/net/html Vulnerable to DoS During HTML Parsing

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

View this project in the Phylum UI

Codecov Report

Merging #84 (a7323f8) into main (205b72b) will decrease coverage by 12.78%.
Report is 1 commits behind head on main.
The diff coverage is 0.00%.

@@             Coverage Diff             @@
##             main      #84       +/-   ##
===========================================
- Coverage   75.41%   62.64%   -12.78%     
===========================================
  Files          15       16        +1     
  Lines         716      862      +146     
===========================================
  Hits          540      540               
- Misses        168      314      +146     
  Partials        8        8               

Flags with carried forward coverage won't be shown. Click here to find out more.

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

Phylum OSS Supply Chain Risk Analysis - FAILED

This repository analyzes the risk of new dependencies. An
administrator of this repository has set requirements via Phylum policy.

If you see this comment, one or more dependencies have failed Phylum's risk analysis.

Package: golang.org/x/[email protected] failed.

golang.org/x/[email protected] is vulnerable to Uncontrolled Resource Consumption

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http2 Denial of Service vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http vulnerable to ping floods

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http vulnerable to a reset flood

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html NULL Pointer Dereference vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html Improper Validation of Array Index vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html Infinite Loop vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html has Improper Restriction of Operations within the Bounds of a Memory Buffer

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/http2/h2c vulnerable to request smuggling attack

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to golang.org/x/net/html NULL Pointer Dereference vulnerability

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

golang.org/x/[email protected] is vulnerable to x/net/html Vulnerable to DoS During HTML Parsing

Risk Domain: Software Vulnerability
Risk Level: high

Reason: risk level cannot exceed medium

View this project in the Phylum UI