Published: 13/03/2023 Updated: 21/11/2024

Webpack 5 prior to 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.

Vulnerable Product	Search on Vulmon	Subscribe to Product
webpack.js webpack

Synopsis Important: pcs security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for pcs is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a security ...

Debian Bug report logs - #1032904 node-webpack: CVE-2023-28154 Package: src:node-webpack; Maintainer for src:node-webpack is Debian Javascript Maintainers <pkg-javascript-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 13 Mar 2023 19:27:02 UTC Severity: important Tags: ...

Demo of JFrog Frogbot capabilities

JFrog Frogbot Branch Status master dev Table of contents 🤖 About JFrog Frogbot 🖥️ Installing Frogbot 🚥 Using Frogbot Scanning pull requests Scanning repositories and fixing issues 📛 Adding the Frogbot badge 🔥 Reporting issues 💻 Contributions 🤖 About JFrog Frogbot Overview JFrog Frogbot is a Git bot that scans your git repositor

One Identity open source projects are supported through One Identity GitHub issues and the One Identity Community This includes all scripts, plugins, SDKs, modules, code snippets or other solutions For assistance with any One Identity GitHub project, please raise a new Issue on the One Identity GitHub project page You may also visit the One Identity Community to ask question

https://access.redhat.com/errata/RHSA-2023:1591 https://nvd.nist.gov https://github.com/EyalDelarea/JFrog-Frogbot-Demo

CVE-2023-28154

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect