제출 #592403: GitHub grey before 5.0.0 Execution with Unnecessary Privileges
| 제목 | GitHub grey before 5.0.0 Execution with Unnecessary Privileges |
|---|---|
| 설명 | The library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown. |
| 원천 | ⚠️ https:/ |
| 사용자 | LamentXU (UID 78142) |
| 제출 | 2025. 06. 07. PM 01:34 (1 년도 ago) |
| 모더레이션 | 2025. 06. 10. PM 01:42 (3 days later) |
| 상태 | 중복 |
| VulDB 항목 | 187945 [md-to-pdf 까지 4.x gray-matter 원격 코드 실행] |
| 포인트들 | 0 |