[GHSA-qm9p-f9j5-w83w] Parcel has an Origin Validation Error vulnerability #6484
Conversation
github-actions
bot
changed the base branch from
main
to
G-Rath/advisory-improvement-6484
There was a problem hiding this comment.
Pull request overview
This PR updates the security advisory for Parcel's Origin Validation Error vulnerability (CVE-2025-56648) to expand the range of affected versions. The vulnerability allows malicious websites to steal source code from development servers via XMLHTTPRequests.
- Extended the
last_affectedversion from 2.16.0 to 2.16.1 for the@parcel/reporter-dev-serverpackage
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.
advisory-database
bot
merged commit cd87e90
into
G-Rath/advisory-improvement-6484
|
Hi @G-Rath! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future! |
Updates
Comments
Updated vulnerable ranges