إرسال #592403: GitHub grey before 5.0.0 Execution with Unnecessary Privilegesالمعلومات

عنوانGitHub grey before 5.0.0 Execution with Unnecessary Privileges
الوصفThe library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown.
المصدر⚠️ https://github.com/simonhaenisch/md-to-pdf/issues/99
المستخدم
 LamentXU (UID 78142)
ارسال07/06/2025 01:34 PM (1 سنة منذ)
الاعتدال10/06/2025 01:42 PM (3 days later)
الحالةمكرر
إدخال VulDB187945 [md-to-pdf حتى 4.x gray-matter تنفيذ التعليمات البرمجية عن بُعد]
النقاط0

Interested in the pricing of exploits?

See the underground prices here!