DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS

Description

Hi, Rspack|Webpack developer team!

Recommendation

Update the @rspack/core package to the latest compatible version. Followings are version details:

Affected version(s): < 1.0.0-rc.1
Patched version(s): 1.0.0-rc.1

References

Could your website be exposed too?

SmartScanner can check your website for DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS and gives you actionable findings to investigate.

Start a free scan

Related Issues

Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS - CVE-2024-43788
DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS - CVE-2024-47068
Layui has DOM Clobbering gadgets that leads to Cross-site Scripting - CVE-2024-47075
XSS via JQLite DOM manipulation functions in AngularJS - Vulnerability

How to Secure your NodeJs Express Javascript Application - part 1

These 7 PHP mistakes leave your website open to the hackers

How do hackers hack websites?

See something that needs correcting? Let us knowUpdated September 19, 2024