5 matches found
EUVD-2022-1164
Malicious code in bioql PyPI...
@aftonbladet/roc-package-web-app-gaea (>=0.1.0 <=0.4.1), roc-package-web-app (>=1.0.0 <=1.0.1) +4 more potentially affected by CVE-2021-23384 via koa-remove-trailing-slashes (=1.0.0)
koa-remove-trailing-slashes NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on koa-remove-trailing-slashes and may be impacted: - @aftonbladet/roc-package-web-app-gaea =0.1.0, =1.0.0, =1.0.0-alpha.1, =1.0.0, =1.0.0-alpha.1, =1.0.0-beta5...
Open Redirect in koa-remove-trailing-slashes
The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::removeTrailingSlashes, as the web serve...
Open redirect
The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::removeTrailingSlashes, as the web serve...
CVE-2021-23384
The package koa-remove-trailing-slashes before 2.0.2 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::removeTrailingSlashes, as the web serve...