@amitojsingh366/pioneer-react (>=0.0.3, <=0.0.4), @angular-devkit/build-angular (>=17.0.0-rc.0, <=17.0.5) +51 more potentially affected by CVE-2023-49293 via vite (4.5.0)

vite NPM version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on vite and may be impacted: - @amitojsingh366/pioneer-react =0.0.3, =17.0.0-rc.0, =0.20.0, =1.0.0-rc.5, =0.5.4, =0.1.0, =17.0.0-next.11, =17.0.0-next.11, =0.0.0, =0.2.0,...

@angular-devkit/build-angular (17.1.0-next.0), @beetpx/beetpx (>=0.22.0, <=0.36.0) +17 more potentially affected by CVE-2023-49293 via vite (>=5.0.0, <=5.0.4)

vite NPM version =5.0.0, =0.22.0, =1.0.0-dev.74fcb60, =1.0.274, =0.0.1, =11.12.0-beta.0, =7.0.0, =0.1.38, =2.0.0-alpha.35, =0.12.0, =1.1.0, =2.0.9, =0.0.7, =1.1.0-develop.0, =1.1.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

@acronis-platform/ui-component-library (0.0.4), @aimmarc/http-module (0.0.1) +139 more potentially affected by CVE-2023-49293 via vite (>=4.4.0-beta.3, <=4.4.11)

vite NPM version =4.4.0-beta.3, =0.6.7, =16.2.0-next.2, =0.0.9, =0.4.0, =0.5.1, =1.0.10-beta.ced5d6e.202405270802, =1.0.0-rc.1, =0.0.0-canary-20230927134149, =1.0.0, =1.0.1 - @committed/ds-colors 0.2.0 and more Source cves: CVE-2023-49293 Source advisory: OSV:GHSA-92R3-M2MG-PJ97...

CVE-2023-49293

Vite HTML transformation vulnerability (CVE-2023-49293) affects apps using appType: 'custom' with the default HTML middleware. When server.transformIndexHtml is invoked manually and the transformed HTML contains inline [removed], an unmodified request URL in the HTML being transformed can allow i...