Enviar #592403: GitHub grey before 5.0.0 Execution with Unnecessary Privileges
| Título | GitHub grey before 5.0.0 Execution with Unnecessary Privileges |
|---|---|
| Descripción | The library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown. |
| Fuente | ⚠️ https:/ |
| Usuario | LamentXU (UID 78142) |
| Sumisión | 2025-06-07 13:34 (hace 1 Año) |
| Moderación | 2025-06-10 13:42 (3 days later) |
| Estado | Duplicado |
| Entrada de VulDB | 187945 [md-to-pdf hasta 4.x gray-matter Ejecución remota de código] |
| Puntos | 0 |