Fedora: Security Advisory for golang-github-evanw-esbuild (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-evanw-esbuild-0.14.38-2.fc36

This is a JavaScript bundler and minifier. It packages up JavaScript and TypeScript code for distribution on the web...

Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build

Impact If you are using the esbuild target or command you are at risk of code/option injection. Attackers can use the command line option to maliciously change your settings in order to damage your project. Patches The problem has been patched in v1.0.0 as it uses a proper method to pass configs ...

PT-2021-24435

Name of the Vulnerable Software and Affected Versions: esbuild target or command versions prior to 1.0.0 Description: The issue allows attackers to maliciously change project settings through code or option injection, potentially damaging the project. This can be done by exploiting the command li...