Comments (4)
from trainset.
is this alert still there?
from trainset.
Yeah:
CVE-2018-14732 More information
low severity
Vulnerable versions: < 3.1.11
Patched version: 3.1.11
An issue was discovered in lib/Server.js in webpack-dev-server before 3.1.11. Attackers are able to steal developer's code because the origin of requests is not checked by the WebSocket server, which is used for HMR (Hot Module Replacement). Anyone can receive the HMR message sent by the WebSocket server via a ws://127.0.0.1:8080/ connection from any origin.
from trainset.
Fixed in 9f232b6
from trainset.
Related Issues (20)
- purple points represent what? HOT 1
- Parsing too conservative with double numbers in scientific notation
- Label selector does not show up when uploading a unique series. HOT 5
- Cannot upload a 5Mb file HOT 2
- "Maximum call stack size exceeded" in getMinMax HOT 1
- Update Heroku stack
- The reference series should show colored points HOT 1
- A user can adjust their chart y axes limits so that series don't overlap and outliers don't dominate
- Change series on hover-over to label
- If no user-defined labels are uploaded, default to "label_1"
- User-defined label form validation
- Make dummy csvs
- sort labels alphabetically in the picker
- Clean up modal style
- Better error message for invalid labels
- Improve design HOT 3
- Super long series messes up chart formatting HOT 3
- Selectors occassionally cut into reference axis HOT 1
- Shift is not always recognized correctly HOT 3
- Get no response when running on Ubuntu 20.04 HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from trainset.