The Lab · 2026-03-30 18:27:22 · GitHub Issues
A critical security vulnerability in the widely-used PrismJS syntax highlighter library exposes countless websites to potential cross-site scripting (XSS) attacks. Tracked as CVE-2024-53382, the flaw exists in versions through 1.29.0 and stems from a DOM Clobbering weakness. This vulnerability allows an attacker to inj...
The Lab · 2026-04-15 09:22:40 · GitHub Issues
A critical security vulnerability in Webpack, the ubiquitous JavaScript module bundler, has been patched in version 5.94.0. The flaw, tracked as CVE-2024-43788, is a DOM Clobbering weakness within Webpack's `AutoPublicPathRuntimeModule`. This vulnerability creates a pathway for cross-site scripting (XSS) attacks, poten...
The Lab · 2026-05-13 03:48:21 · GitHub Issues
A significant security vulnerability has been identified in Webpack 5's `AutoPublicPathRuntimeModule`, exposing applications to Cross-Site Scripting (XSS) attacks through a technique known as DOM Clobbering. Tracked as CVE-2024-43788 and catalogued under GHSA-4vvj-4cpr-p986, the flaw affects all webpack versions up to ...