Hacker Blog Posts

Sick Codes personal blog

Netmask NPM package, used by 270k+ projects, vulnerable to octal input data

sick.codes published 2021-03-28

The following research outlines a vulnerability discovered in netmask npm package that is currently used by 278,722+ other projects. The vulnerability has been present for 9 years. Since this package is so incredibly widespread, I would suggest every nodejs developer to check their package.jsons to see if they use…
Read on sick.codes → Discuss on HN (87) Archived copy
Points
123
HN comments
87
Submissions
1
Cited by
0 commenters

Security & PrivacyWeb & Frontend2021

On Hacker News

SubmittedTitle on HNPointsComments
Mar 29, 2021Netmask NPM package, used by 270k+ projects, vulnerable to octal input data by chha12387

Related posts from the same era