Malicious code in hydrogen-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62359364101bca3a55c77d57dcf377cd0bad17b716447cc06c3d7a2a72ed898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3736 Malicious code in hydrogen-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62359364101bca3a55c77d57dcf377cd0bad17b716447cc06c3d7a2a72ed898c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hydrogen-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c990881f1898c54cc7d2c7a7fb78c754424e170a34ffa878a0a6f437f6468b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3735 Malicious code in hydrogen-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c990881f1898c54cc7d2c7a7fb78c754424e170a34ffa878a0a6f437f6468b32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-6J22-WV8G-894F Potential Cross-site Scripting vulnerability in Hydrogen

Impact There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from version 0.10.0 to 0.18.0. This vulnerability is exploitable in applications whose...

Potential Cross-site Scripting vulnerability in Hydrogen

Impact There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from version 0.10.0 to 0.18.0. This vulnerability is exploitable in applications whose...

Cross-site Scripting (XSS)

@shopify/hydrogen is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the renderHydrogen function of entry-server.js when the application is built with hydrogen...

CVE-2022-29230

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

Cross site scripting

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230 Potential cross-site scripting (XSS) vulnerability in Hydrogen

Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting XSS vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects all versions of Hydrogen starting from...

CVE-2022-29230

Hydrogen (Shopify) has a reported Cross-Site Scripting (XSS) vulnerability affecting version range 0.10.0 to 0.18.0, exploitable when hydrating data is user-controlled. The issue may allow an arbitrary script to run in pages built with Hydrogen. A fix is available: upgrade to v0.19.0; CSP is not ...

Hydrogen 跨站脚本漏洞

Hydrogen is a React-based framework for Shopify individual developers. It is used to build dynamic, custom storefronts powered by Shopify. A cross-site scripting vulnerability exists in Hydrogen versions 0.10.0 through 0.18.0, which can be exploited by an attacker to execute script on pages built...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-438G-FX34-4H9M...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:GHSA-HQC8-J86X-2764...

hydrogenfuelsystems.com.au Cross Site Scripting vulnerability OBB-1483184

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

epoll (>=0.4.0, <=0.6.0), hydrogen (>=0.1.0, <=0.1.5) potentially affected by CVE-2020-35892 +1 more via simple-slab (>=0.1.0, <=0.2.3)

simple-slab CARGO version =0.1.0, =0.4.0, =0.1.0, =0.1.5 Source cves: CVE-2020-35892, CVE-2020-35893 Source advisory: OSV:RUSTSEC-2020-0039...

CVE-2019-2097

In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

CVE-2019-2097

In HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to type confusion. This could lead to remote code execution from a malicious proxy configuration, with no additional execution privileges needed. User interaction is not needed for exploitation. Product:...

Hydrogen Krypton Travel App for Android has logic design flaws

Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. Hydrogen Krypton Mobility APP for Android has a logical design vulnerability that allows an attacker to log in to any user account by means of a cell phone number and brute force breaking of the...