17 matches found
CLSA-2026-1792938613 TuxCare security update for gatsby-plugin-sharp (1 CVE)
TuxCare rebuilt gatsby-plugin-sharp to address 1 CVE. Fixed in 2.14.4-tuxcare.1...
CVE-2023-30548
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...
@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.2), @sonarsource/gatsby-theme-marketing (>=3.1.0, <=3.5.0) potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=5.0.0, <=5.6.0)
gatsby-plugin-sharp NPM version =5.0.0, =1.5.0-beta.0, =3.1.0, =3.5.0 Source cves: CVE-2023-30548 Source advisory: OSV:GHSA-H2PM-378C-PCXX...
GHSA-H2PM-378C-PCXX Path traversal vulnerability in gatsby-plugin-sharp
Impact The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. The following steps can be used to reproduce the vulnerability: Create a new Gatsby project, and install...
@adobe/gatsby-theme-aio (>=4.5.7, <=4.7.5), @adobe/gatsby-theme-commerce (0.0.2) +19 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=4.0.0-alpha-9689ff.4, <=4.25.0)
gatsby-plugin-sharp NPM version =4.0.0-alpha-9689ff.4, =4.5.7, =0.3.0-beta.0, =3.0.0, =4.0.0, =0.0.0-canary-20211022203039, =1.18.5, =1.0.2, =5.0.8, =0.0.1, =2.0.4, =1.0.0, =1.0.12 - fullstack-gatsby-theme-bch-wallet-v1 1.0.12 and more Source cves: CVE-2023-30548 Source advisory:...
@adobe/gatsby-theme-aio (>=4.5.7, <=4.7.5), @adobe/gatsby-theme-commerce (0.0.2) +19 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=4.0.0-alpha-9689ff.4, <=4.25.0)
gatsby-plugin-sharp NPM version =4.0.0-alpha-9689ff.4, =4.5.7, =0.3.0-beta.0, =3.0.0, =4.0.0, =0.0.0-canary-20211022203039, =1.18.5, =1.0.2, =5.0.8, =0.0.1, =2.0.4, =1.0.0, =1.0.12 - fullstack-gatsby-theme-bch-wallet-v1 1.0.12 and more Source cves: CVE-2023-30548 Source advisory: GHSA-H2PM-378C-P...
Path traversal vulnerability in gatsby-plugin-sharp
Impact The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. The following steps can be used to reproduce the vulnerability: Create a new Gatsby project, and install...
@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.2), @sonarsource/gatsby-theme-marketing (>=3.1.0, <=3.5.0) potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=5.0.0, <=5.6.0)
gatsby-plugin-sharp NPM version =5.0.0, =1.5.0-beta.0, =3.1.0, =3.5.0 Source cves: CVE-2023-30548 Source advisory: GHSA-H2PM-378C-PCXX...
Path traversal
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...
CVE-2023-30548 Path traversal vulnerability in gatsby-plugin-sharp
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...
@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.2), @sonarsource/gatsby-theme-marketing (>=3.1.0, <=3.5.0) potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=5.0.0, <=5.6.0)
gatsby-plugin-sharp NPM version =5.0.0, =1.5.0-beta.0, =3.1.0, =3.5.0 Source cves: CVE-2023-30548 Source advisory: MEND:CVE-2023-30548...
CVE-2023-30548 Path traversal vulnerability in gatsby-plugin-sharp
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...
10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +947 more potentially affected by CVE-2023-30548 via gatsby-plugin-sharp (>=1.6.7, <=4.25.0)
gatsby-plugin-sharp NPM version =1.6.7, =1.0.0, =1.0.1, =1.0.0, =0.1.13, =0.48.0, =1.0.0, =1.0.0, =1.0.10, =3.0.0, =4.7.5 - @adobe/gatsby-theme-commerce 0.0.2 and more Source cves: CVE-2023-30548 Source advisory: MEND:CVE-2023-30548...
CVE-2023-30548
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...
CVE-2023-30548
The CVE-2023-30548 issue affects gatsby-plugin-sharp prior to versions 5.8.1 and 4.25.1, introducing a path traversal vulnerability when running the Gatsby develop server. By default, develop is bound to localhost, but if exposed (e.g., via --host 0.0.0.0, -H 0.0.0.0, or GATSBY_HOST=0.0.0.0), an ...
PT-2023-22774
Name of the Vulnerable Software and Affected Versions gatsby-plugin-sharp versions prior to 5.8.1 and 4.25.1 Description The gatsby-plugin-sharp plugin contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. By default, gatsby develop is only...
CVE-2023-30548: Improper Limitation of a Pathname to a Restricted Directory
gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...