EUVD-2023-0381

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-22491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions...

CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

Arbitrary Code Injection

gatsby-transformer-remark is vulnerable to Arbitrary Code Injection. The vulnerability is due to the gray-matter package which is used in parsing and is vulnerable in the default configuration, allowing an attacker to inject and execute unsanitized JavaScript codes...

CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

UBUNTU-CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

CVE-2023-22491 gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

CVE-2023-22491

The CVE-2023-22491 entry concerns the Gatsby gatsby-transformer-remark plugin, affected in versions prior to 5.25.1 and 6.3.2. The vulnerability arises when the plugin passes input to gray-matter in data mode, allowing JavaScript injection in its default configuration if input is not sanitized; i...

CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

@boomerang-io/gatsby-theme-boomerang (>=1.5.0-beta.0, <=1.6.1) potentially affected by CVE-2023-22491 via gatsby-transformer-remark (6.0.0)

gatsby-transformer-remark NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gatsby-transformer-remark and may be impacted: - @boomerang-io/gatsby-theme-boomerang =1.5.0-beta.0, =1.6.1 Source cves: CVE-2023-22491 Source advisory:...

GHSA-7CH4-RR99-CQCW gatsby-transformer-remark has possible unsanitized JavaScript code injection

Impact The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default configuration, unless input is sanitized. The vulnerability is present in gatsby-transformer-remark when...

@boomerang-io/gatsby-theme-boomerang (>=0.3.0-beta.0, <=1.4.2), @dcl/docs-site (>=1.0.0-3010867520.commit-1740972, <=1.0.0-20220919140413.commit-6dee65c) +5 more potentially affected by CVE-2023-22491 via gatsby-transformer-remark (>=5.4.0, <=5.23.1)

gatsby-transformer-remark NPM version =5.4.0, =0.3.0-beta.0, =1.0.0-3010867520.commit-1740972, =1.1.1, =1.18.5, =0.0.1, =0.1.1 - gatsby-starter-netlify-tailwind 1.1.0 Source cves: CVE-2023-22491 Source advisory: OSV:GHSA-7CH4-RR99-CQCW...