News for hackers. Stuff that matters.

A comment on 20% of all Node.js modules found vulnerable to injection attacks. Parent comment

Re:20% of all Node.js modules found vulnerable to injection ... by Ajedi32 on Monday March 12, 2018 @11:43AM (#16568881)
Maybe because it's not sending user input into the "vulnerable" API? Or because it's not even calling the "vulnerable" API in the first place? Or because it's a system utility which will never be exposed to untrusted user input?
[ Parent | on HN ]

There are no comments on this comment yet.