Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-37Q6-576Q-VGR7
HistoryOct 30, 2018 - 8:36 p.m.

Missing Origin Validation in parcel-bundler

2018-10-3020:36:53
Google
osv.dev
7

0.003 Low

EPSS

Percentile

66.3%

JSON

Versions of parcel-bundler before 1.10.0 are missing origin validation on the websocket server. This vulnerability allows a remote attacker to steal a developer’s source code because the origin of requests to the websocket server that is used for Hot Module Replacement (HMR) are not validated.

Recommendation

Update to version 1.10.0 or later.

CPENameOperatorVersion
parcel-bundlerlt1.10.0

Related

veracode 1
nvd 1
nodejs 1
prion 1
github 1
cve 1
cvelist 1
veracode
veracode
Information Disclosure
2018-09-24 06:51:47
nvd
nvd
CVE-2018-14731
2018-09-21 17:29:05
nodejs
nodejs
Missing Origin Validation
2018-11-02 03:41:24
prion
prion
Code injection
2018-09-21 17:29:00
github
github
Missing Origin Validation in parcel-bundler
2018-10-30 20:36:53
cve
cve
CVE-2018-14731
2018-09-21 17:29:05
cvelist
cvelist
CVE-2018-14731
2018-09-21 17:00:00

0.003 Low

EPSS

Percentile

66.3%

JSON
Related for OSV:GHSA-37Q6-576Q-VGR7
veracode1nvd1nodejs1prion1github1cve1cvelist1