26 matches found
Malicious code in rspack-tests-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11442 Malicious code in rspack-tests-tools (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11441 Malicious code in rspack-test-tool (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rspack-test-tool (npm)
--- -= Per source details. Do not edit below this line.=-...
Security Bulletin: IBM Event Processing susceptible improper validation
Summary IBM Event Processing vulnerable to cross-site scripting, caused by improper validation CVE-2024-43788 Vulnerability Details CVEID:CVE-2024-43788 DESCRIPTION: Webpack and Rspack are vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote...
GHSA-84JW-G43V-8GJM DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS
Hi, Rspack|Webpack developer team! Summary We discovered a DOM Clobbering vulnerability in Webpack’s AutoPublicPathRuntimeModule. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptless attacker-controlled HTML elements e.g., an img tag with an...