Description
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.
Remediation
References
https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66
https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8
Related Vulnerabilities
CVE-2023-26105 Vulnerability in npm package utilities
CVE-2020-28168 Vulnerability in maven package org.webjars.npm:axios
CVE-2021-21234 Vulnerability in maven package eu.hinsch:spring-boot-actuator-logview
CVE-2021-43843 Vulnerability in npm package jsx-slack
CVE-2021-23497 Vulnerability in npm package @strikeentco/set