Description
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.
Remediation
References
https://huntr.dev/bounties/63f1ff91-48f3-4886-a179-103f1ddd8ff8
https://github.com/BuilderIO/qwik/pull/3249/commits/4d9ba6e098ae6e537aa55abb6b8369bb670ffe66
Related Vulnerabilities
CVE-2016-10707 Vulnerability in maven package org.webjars.bower:jquery
CVE-2023-34624 Vulnerability in maven package net.sourceforge.htmlcleaner:htmlcleaner
CVE-2020-7683 Vulnerability in npm package rollup-plugin-server
CVE-2018-16489 Vulnerability in npm package just-extend
CVE-2022-25863 Vulnerability in npm package gatsby-plugin-mdx