提交 #592403: GitHub grey before 5.0.0 Execution with Unnecessary Privileges
| 标题 | GitHub grey before 5.0.0 Execution with Unnecessary Privileges |
|---|---|
| 描述 | The library gray-matter (used by md-to-pdf to parse front matter) exposes a JS-engine by default, which essentially runs eval on the given Markdown. |
| 来源 | ⚠️ https:/ |
| 用户 | LamentXU (UID 78142) |
| 提交 | 2025-06-07 13時34分 (1 年前) |
| 管理 | 2025-06-10 13時42分 (3 days later) |
| 状态 | 重复 |
| VulDB条目 | 187945 [md-to-pdf 直到 4.x gray-matter 远程代码执行] |
| 积分 | 0 |