CVE-2018-14730
1 advisory.
npm/browserify-hmr CVE-2018-14730: high 7.5
Missing Origin Validation in browserify-hmr
Action: Upgrade browserify-hmr to 0.4.0 or later.
npm i browserify-hmr@0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-77q4-m83q-w76v
- https://nvd.nist.gov/vuln/detail/CVE-2018-14730
- https://github.com/AgentME/browserify-hmr/issues/41
- https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages
- https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages)
- https://github.com/AgentME/browserify-hmr
- https://www.npmjs.com/advisories/726
CVE-2018-14730 · published · modified · JSON