Hot Chocolate 安全漏洞

Hot Chocolate is a backend runtime environment open source by ChilliCream. Versions prior to 12.22.7, 13.9.16, 14.3.1, and 15.1.14 of Hot Chocolate have security vulnerabilities. These vulnerabilities stem from the recursive parser’s lack of a recursion depth limit, which can lead to stack overfl...

Malicious code in bigid-filter-recursive-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d563f6beba8e1bf2b85146d51f48b288e40450a303633cd795bc935c7e02c1f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...