facebookarchive/nuclide
GitHub
Releases234
Frequency5 days 7 hours
Last Release
Stars7.72K
An open IDE for web and native mobile development, built on top of Atom
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.290.0 | 9.8 CRITICAL | 7.5 HIGH | ||
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0. | ||||