[Security Nation] Kate Stewart on Open-Source Projects at the Linux Foundation

!\Security Nation\ Kate Stewart on Open-Source Projects at the Linux Foundationhttps://blog.rapid7.com/content/images/2022/04/securitynationlogo.jpg In this episode of Security Nation, Jen and Tod chat with Kate Stewart, VP of Dependable Embedded Systems at the Linux Foundation, about the...

@backstage/plugin-techdocs (>=0.0.0-nightly-20220504024625, <=1.1.1-next.2), @eui/deps-base (>=13.1.5-snapshot-1652433005121, <=14.0.4) potentially affected by unknown CVE via event-source-polyfill (1.0.26)

event-source-polyfill NPM version 1.0.26 is affected by a known vulnerability. The following packages have a transitive dependency on event-source-polyfill and may be impacted: - @backstage/plugin-techdocs =0.0.0-nightly-20220504024625, =13.1.5-snapshot-1652433005121, =14.0.4 Source cves: unknown...

Undesired Behavior

Overview event-source-polyfill is an A polyfill for http://www.w3.org/TR/eventsource/ Affected versions of this package are vulnerable to Undesired Behavior. This package geo-locates users based on their IP address and if the user is Russia-based prints a political protest message in the browser ...