Submit #592403: GitHub grey before 5.0.0 Execution with Unnecessary Privileges
| Titel | GitHub grey before 5.0.0 Execution with Unnecessary Privileges |
|---|---|
| Beschreibung | The library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown. |
| Quelle | ⚠️ https:/ |
| Benutzer | LamentXU (UID 78142) |
| Einreichung | 07.06.2025 13:34 (vor 1 Jahr) |
| Moderieren | 10.06.2025 13:42 (3 days later) |
| Status | Duplikat |
| VulDB Eintrag | 187945 [md-to-pdf bis 4.x gray-matter Remote Code Execution] |
| Punkte | 0 |