qwik-lottie (>=0.0.5, <=0.0.6), storybook-framework-qwik (>=0.0.1, <=0.0.4) potentially affected by CVE-2023-2307 via @builder.io/qwik-city (>=0.0.112, <=0.0.128)

@builder.io/qwik-city NPM version =0.0.112, =0.0.5, =0.0.1, =0.0.4 Source cves: CVE-2023-2307 Source advisory: OSV:GHSA-C54W-7J5F-XG98...

CVE-2023-2307

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik

Cross-Site Request Forgery CSRF in GitHub repository builderio/qwik prior to 0.104.0...

CVE-2023-2307

CVE-2023-2307 describes a Cross-Site Request Forgery (CSRF) vulnerability in the GitHub repository for builderio/qwik. The vulnerability affects versions prior to 0.104.0, where an attacker could abuse CSRF to perform unintended actions in scoped user contexts. Public sources consistently referen...