parcel-bundler@1.9.7 vulnerabilities

Blazing fast, zero configuration web application bundler

Direct Vulnerabilities

Known vulnerabilities in the parcel-bundler package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Information Exposure

parcel-bundler is a web application bundler.

Affected versions of this package are vulnerable to Information Exposure. A malicious user was able to steal user's code as the origin of requests wasn't checked by websocket server, as long as they share the same network.

How to fix Information Exposure?

Upgrade parcel-bundler to version 1.10.0 or higher.