Skip to content

Vendor

browserify-hot module replacement project vulnerabilities

1 published CVE affecting browserify-hot module replacement project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of browserify-hot module replacement project alerts

Products

Latest browserify-hot module replacement project CVEs

Newest publication first

  1. CVE-2018-14730 Missing Origin Validation in browserify-hmr

    Published
    HighCVSS 7.5 EPSS 1.7%

    An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws:...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.