5837 matches found
This Week in Spring - July 5th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! This weeks all sorts of weird for me. Its Tuesday! But here in the US we just celebrated the 4th of July, and I, like many Americans, took a long weekend. Took some time with the family to do a little road trip up north to...
This Week in Spring - June 28th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Im writing this from the Big Apple, New York City! Im here for the SpringOne Tour 2022 NYC event. This is my first time back in New York City since before the pandemic and it has been so much fun. Ive been catching up with...
Spring Tips: Learn Spring for GraphQL (the last two episodes: parts 7 and 8)
Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev @rstoya05 - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do...
MAL-2022-7260 Malicious code in x3-stock-graphql-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80cd5e1c9d72642b5cf61b5bf0d49e2b32267885c173a08e5bb0ef28124885e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in x3-stock-graphql-demo
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in x3-stock-graphql-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80cd5e1c9d72642b5cf61b5bf0d49e2b32267885c173a08e5bb0ef28124885e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sfcc-core/core-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0a9e189f0e17b4410de77d0ad249257289e7c84350015968cae5a1e1320f17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @sfcc-core/core-graphql
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @fbsystem/figma-graphql
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @fbsystem/figma-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcdcbc9429c0fa805533c9d10c14de74d0e13ff69d006e033802a11ac00733b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-266 Malicious code in @fbsystem/figma-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcdcbc9429c0fa805533c9d10c14de74d0e13ff69d006e033802a11ac00733b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fb-graphql-compiler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d803ee022c130857a432483f2147e7caa097ff439a76940df7022e64e588f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2974 Malicious code in fb-graphql-compiler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986d803ee022c130857a432483f2147e7caa097ff439a76940df7022e64e588f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in fb-graphql-compiler
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Spring Tips: Learn Spring for GraphQL (parts 5 and 6 of an ongoing series)
Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev @rstoya05 - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do...
CVE-2022-25863
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible whe...
Deserialization of untrusted data
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible whe...
CVE-2022-25863
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible whe...
Spring Tips: Learn Spring for GraphQL (parts 3 and 4 of an ongoing series)
Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev @rstoya05 - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do...
CVE-2022-25863: Deserialization of Untrusted Data
The package gatsby-plugin-mdx before 2.14.1, from 3.0.0 and before 3.15.2 are vulnerable to Deserialization of Untrusted Data when passing input through to the gray-matter package, due to its default configurations that are missing input sanitization. Exploiting this vulnerability is possible whe...