@adobe/gatsby-theme-commerce (>=0.0.1, <=0.0.2), @basic-ui/gatsby-theme-docs (>=0.0.13, <=1.0.24-alpha.1) +16 more potentially affected by CVE-2023-34238 via gatsby (>=4.1.0, <=4.24.4)

gatsby NPM version =4.1.0, =0.0.1, =0.0.13, =0.0.0-6208810082.commit-c4ea709, =1.0.0, =1.7.1, =1.0.0, =1.0.2, =0.0.0-development, =1.1.0, =0.3.22, =5.76.0, =1.0.0, =1.0.12 - fullstack-gatsby-theme-bch-wallet-v1 1.0.12 - gatsby-starter-netlify-tailwind 1.1.0 and more Source cves: CVE-2023-34238...

gatsby-starter-thepuzzlers-boxenstop (>=1.1.0, <=1.1.1), gatsby-starter-thepuzzlers-core (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2023-34238 via gatsby (5.8.1)

gatsby NPM version 5.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby and may be impacted: - gatsby-starter-thepuzzlers-boxenstop =1.1.0, =1.1.0, =1.1.0, =1.1.1 Source cves: CVE-2023-34238 Source advisory: OSV:GHSA-C6F8-8R25-C4GC...

CVE-2023-34238

Gatsby is a free and open source framework based on React. The Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. Any file in scope o...

CVE-2023-34238 Local File Inclusion vulnerability in Gatsby

Gatsby is a free and open source framework based on React. The Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. Any file in scope o...