Dismissed
by @mweinelt Activity log
- Created automatic suggestion
-
@mweinelt
removed
5 packages
- python312Packages.pyqwikswitch
- python313Packages.pyqwikswitch
- python314Packages.pyqwikswitch
- home-assistant-component-tests.qwikswitch
- tests.home-assistant-component-tests.qwikswitch
- @mweinelt dismissed
Qwik affected by unauthenticated RCE via server$ Deserialization
Qwik is a performance focused javascript framework. qwik <=1.19.0 is vulnerable to RCE due to an unsafe deserialization vulnerability in the server$ RPC mechanism that allows any unauthenticated user to execute arbitrary code on the server with a single HTTP request. Affects any deployment where require() is available at runtime. This vulnerability is fixed in 1.19.1.
References
- https://github.com/QwikDev/qwik/security/advisories/GHSA-p9x5-jp3h-96mm x_refsource_CONFIRM
Affected products
qwik
- ==< 1.19.1
Ignored packages (5)
pkgs.python312Packages.pyqwikswitch
QwikSwitch USB Modem API binding for Python
pkgs.python313Packages.pyqwikswitch
QwikSwitch USB Modem API binding for Python
pkgs.python314Packages.pyqwikswitch
QwikSwitch USB Modem API binding for Python
pkgs.home-assistant-component-tests.qwikswitch
Open source home automation that puts local control and privacy first
pkgs.tests.home-assistant-component-tests.qwikswitch
Open source home automation that puts local control and privacy first