Macil/browserify-hmr

Macil/browserify-hmr

GitHubGitHub
GitHubgithub.com
Releases9
Frequency6 months 3 days
Last Release
Stars372
Hot Module Replacement plugin for Browserify
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-14730↗
7.5 HIGH5 MEDIUM

An issue was discovered in Browserify-HMR. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:3123/ connection from any origin.