You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@inlong.apache.org by "dockerzhang (via GitHub)" <gi...@apache.org> on 2023/10/30 12:06:35 UTC

[I] [Improve][CVE] Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code [inlong]

dockerzhang opened a new issue, #9157:
URL: https://github.com/apache/inlong/issues/9157

   ### Description
   
   Using Babel to compile code that was specifically crafted by an attacker can lead to arbitrary code execution during compilation, when using plugins that rely on the path.evaluate()or path.evaluateTruthy() internal Babel methods.
   
   ### InLong Component
   
   InLong Dashboard
   
   ### Are you willing to submit PR?
   
   - [X] Yes, I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@inlong.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [Improve][CVE] Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code [inlong]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on issue #9157:
URL: https://github.com/apache/inlong/issues/9157#issuecomment-1925538035

   This issue is stale because it has been open for 60 days with no activity.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@inlong.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [I] [Improve][CVE] Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code [inlong]

Posted by "dockerzhang (via GitHub)" <gi...@apache.org>.
dockerzhang closed issue #9157: [Improve][CVE] Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
URL: https://github.com/apache/inlong/issues/9157


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@inlong.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org