zsa@0.2.1 vulnerabilities
`zsa` is a library for building typesafe server actions in Next.js. It provides a simple, scalable developer experience with features like validated inputs/outputs, procedures (middleware) for passing context to server actions, and React Query integration
-
latest version
0.6.0
-
latest non vulnerable version
-
first published
4 months ago
-
latest version published
23 days ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the zsa package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
zsa is a Affected versions of this package are vulnerable to Generation of Error Message Containing Sensitive Information due to the error message generation process. An attacker can obtain sensitive server information, such as machine usernames and directory paths, by exploiting the transfer of parse error stacks from the server to the client in production build mode. How to fix Generation of Error Message Containing Sensitive Information? Upgrade |
<0.3.3
|