Description
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.
Remediation
References
https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66
https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8
Related Vulnerabilities
CVE-2013-4940 Vulnerability in npm package yui
CVE-2023-26488 Vulnerability in npm package @openzeppelin/contracts
CVE-2020-11002 Vulnerability in maven package io.dropwizard:dropwizard-validation
CVE-2022-0272 Vulnerability in maven package io.gitlab.arturbosch.detekt:detekt-core
CVE-2016-4468 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa