Podcasts Technology The Backend Engineering Show with Hussein Nasser Remote Code Execution bug found in Popular Node.js changelog library (I go through the code)

Remote Code Execution bug found in Popular Node.js changelog library (I go through the code)

Published: July 21, 2020, 8:58 p.m.

Github security team has found a remote execution code in Node.JS library changelog. In this video I describe the bug and go through the code  Resources https://portswigger.net/daily-swig/github-security-team-finds-remote-code-execution-bug-in-popular-node-js-changelog-library https://github.com/conventional-changelog/standard-version/pull/351/files https://github.com/advisories/GHSA-7xcx-6wjh-7xp2

--- Send in a voice message: https://anchor.fm/hnasr/message