CVE-2024-38375

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...

CVE-2024-38375 @fastly/js-compute use-after-free in some host call implementations

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...

CVE-2024-38375

The CVE-2024-38375 entry concerns @fastly/js-compute, a JavaScript SDK/runtime for Fastly Compute. It describes a use-after-free bug in several functions (e.g., FetchEvent.client.*, CacheEntry.prototype.userMetadata, Device.lookup) that could leak data and crash a Compute service, often returning...

CVE-2024-38375 @fastly/js-compute use-after-free in some host call implementations

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

Google has taken steps to block ads for e-commerce sites that use the Polyfill.io service after a Chinese company acquired the domain and modified the JavaScript library "polyfill.js" to redirect users to malicious and scam sites. "Protecting our users is our top priority. We detected a security...

Fastly js-compute-runtime security vulnerability

Fastly js-compute-runtime is a Fastly open source runtime environment. A security vulnerability exists in Fastly js-compute-runtime, which stems from the implementation of multiple functions containing post-release reuse vulnerabilities...

PT-2024-27968

Name of the Vulnerable Software and Affected Versions @fastly/js-compute versions prior to 3.16.0 Description The implementation of several functions in the @fastly/js-compute package includes a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding...

CVE-2024-38375: Use After Free

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and...

CVE-2024-34768

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

CVE-2024-34768

CVE-2024-34768 corresponds to a Missing Authorization vulnerability in the WordPress Fastly plugin (affected: 1.2.25 and earlier). Reports from multiple sources indicate a Broken Access Control via Missing Authorization in Fastly’s AJAX actions, enabling unauthorized access or actions on affected...

CVE-2024-34768 WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

CVE-2024-34768 WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

WordPress plugin Fastly security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-26176

Name of the Vulnerable Software and Affected Versions Fastly versions 1.2.25 and earlier Description The issue is related to a Missing Authorization vulnerability in Fastly. Recommendations For Fastly versions 1.2.25 and earlier, at the moment, there is no information about a newer version that...

CVE-2024-34768: Missing Authorization

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

Popular WordPress Plugins Leave Millions Open to Backdoor Attacks

Fastly researchers discover unauthenticated stored XSS attacks plaguing WordPress Plugins including WP Meta SEO, and the popular WP…...

CVE-2024-34803

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

CVE-2024-34803 WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

CVE-2024-34803 WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25...

PT-2024-26199

Name of the Vulnerable Software and Affected Versions Fastly versions 1.2.25 and earlier Description The issue is a Missing Authorization vulnerability. It is identified with a severity score, but the details of the score are not relevant to the description of the issue itself. There is no...