Snyk Security Database

shakapacker is an Use webpack to manage app-like JavaScript modules in Rails

Affected versions of this package are vulnerable to Inclusion of Sensitive Information in Source Code via the EnvironmentPlugin , which exposed all build environment variables. An attacker can access sensitive environment variables, including credentials and API keys, by inspecting client-side JavaScript bundles that have embedded these values.

nicegui is a Create web-based user interfaces with Python. The nice way.

Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime in the handle_disconnect() function, when using the Redis backend for tab storage. An attacker can cause service degradation and loss of persistent storage functionality by repeatedly opening and closing browser tabs, which exhausts available Redis connections.

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the getTemplate function. An attacker can execute arbitrary code on the server by injecting malicious FreeMarker templates through the email template editing API when authenticated with administrative privileges.

Note: This is only exploitable if the attacker has access to an account with admin-level permissions.