6 matches found
CVE-2023-45311
fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project that depends on fsevents distributes code that was obtained from that URL at a time when it was controlled by an...
11-builder (0.1.0), 2muchcoffee-react-scripts (0.1.0) +3096 more potentially affected by CVE-2023-45311 via fsevents (>=1.0.14, <=1.2.9)
fsevents NPM version =1.0.14, =0.1.0, =1.0.3, =0.1.4, =1.0.0-beta.1, =0.0.1, =0.7.1, =1.1.0-1, =1.0.0, =1.1.2, =1.1.9 - @abelmuro/food-dasher-app 1.0.0 - @accumineapps/hourlyactual 0.1.0 and more Source cves: CVE-2023-45311 Source advisory: OSV:GHSA-8R6J-V8PM-FQW3...
CVE-2023-45311
fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project that depends on fsevents distributes code that was obtained from that URL at a time when it was controlled by an...
CVE-2023-45311
fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project that depends on fsevents distributes code that was obtained from that URL at a time when it was controlled by an...
CVE-2023-45311
fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project that depends on fsevents distributes code that was obtained from that URL at a time when it was controlled by an...
CVE-2023-45311
CVE-2023-45311 affects fsevents releases prior to 1.2.11. The vulnerability arises because fsevents depends on the external URL fsevents-binaries.s3-us-west-2.amazonaws.com; if code distributed via that URL was obtained when the URL was controlled by an adversary, an attacker could execute arbitr...