Skip to content

Merge pull request #9 from postsharp/dependabot/bundler/nokogiri-1.19.1

2f7afa4
Select commit
Loading
Failed to load commit list.
Open

Suggested additions to the repo #1

Merge pull request #9 from postsharp/dependabot/bundler/nokogiri-1.19.1
2f7afa4
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Mar 5, 2026 in 3s

4 new alerts including 2 critical severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 critical
  • 2 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 15 in _plugins/jekyll_include_plugin/jekyll_include_plugin.rb

See this annotation in the file changed.

Code scanning / CodeQL

Use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value Critical

Call to URI.open with a non-constant value. Consider replacing it with URI().open.

Check failure on line 122 in _plugins/jekyll_include_plugin/jekyll_include_plugin.rb

See this annotation in the file changed.

Code scanning / CodeQL

Use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value Critical

Call to URI.open with a non-constant value. Consider replacing it with URI().open.

Check failure on line 55 in _plugins/jekyll_include_plugin/utils.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
user-provided value
may run slow on strings starting with '\[<snippet ' and with many repetitions of ' '.

Check failure on line 85 in _plugins/jekyll_include_plugin/utils.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
user-provided value
may run slow on strings starting with '\[<snippet ' and with many repetitions of ' '.