1976 matches found
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Overview astro is an Astro is a modern site builder with web best practices, performance, and DX front-of-mind. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the X-Forwarded-Host header when using the...
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Overview @astrojs/node is a Deploy your site to a Node.js server Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the X-Forwarded-Host header when using the Astro.url property without validation. An attacker c...
Astro's `X-Forwarded-Host` is reflected without validation
Summary When running Astro in on-demand rendering mode using a adapter such as the node adapter it is possible to maliciously send an X-Forwarded-Host header that is reflected when using the recommended Astro.url property as there is no validation that the value is safe. Details Astro reflects th...
EUVD-2018-10376
Malware in sbrugna...
EUVD-2010-1411
Malware in sbrugna...
EUVD-2005-2771
Malware in sbrugna...
EUVD-2005-2772
Malware in sbrugna...
EUVD-2008-5991
Malware in sbrugna...
EUVD-2009-2715
Malware in sbrugna...
EUVD-2010-4122
Malware in sbrugna...
EUVD-2011-5057
Malware in sbrugna...
EUVD-2013-3071
Malware in sbrugna...
EUVD-2013-3070
Malware in sbrugna...
EUVD-2014-5109
Malware in sbrugna...
EUVD-2015-3067
Malware in sbrugna...
EUVD-2016-1070
Malware in sbrugna...
EUVD-2016-9998
Malware in sbrugna...
EUVD-2018-18428
Malware in sbrugna...