ALT-PU-2026-4453: package node-webpack update to version 5.105.4-alt1
Описание
This update upgrades node-webpack to version 5.105.4-alt1.
Устраненные уязвимости4
Ссылки5
GHSA-38r7-794h-5758
https://github.com/advisories/GHSA-38r7-794h-5758GHSA-4vvj-4cpr-p986
https://github.com/advisories/GHSA-4vvj-4cpr-p986GHSA-8fgc-7cc6-rx7x
https://github.com/advisories/GHSA-8fgc-7cc6-rx7xGHSA-hc6q-2mpp-qw7j
https://github.com/advisories/GHSA-hc6q-2mpp-qw7jСвязанные уязвимости
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.
Webpack 5 before 5.76.0 does not avoid cross-realm object access. Impo ...