CVE-2024-53384
Open
- Dominant language
- TypeScript
- Stars
- 11.3k
- Forks
- 275
- PR merge metrics
- No merged PRs in 30d
Description
https://ossindex.sonatype.org/vulnerability/CVE-2024-53384
https://gist.github.com/jackfromeast/36f98bf7542d11835c883c1d175d9b92
Did not see this address in `8.4.0` changelog so assuming its still relevant
Contributor guide
Research direction
Start by reviewing CVE-2024-53384 in the linked Sonatype advisory and gist, then compare its affected component or dependency with the tsup 8.4.0 changelog. Confirm whether the vulnerability is still present in the current project and document the evidence or required remediation; the issue does not name a source file or test to run.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100