diff --git a/input/new.json b/input/new.json index 87646b9a..1fdd77f8 100644 --- a/input/new.json +++ b/input/new.json @@ -1,15 +1,20 @@ { - "package_name": "", - "patch_versions": [], - "vulnerable_ranges": [], - "cwe": [], - "tldr": "", - "doest_this_affect_me": "", - "how_to_fix": "", - "vulnerable_to": "", + "package_name": "esbuild", + "patch_versions": ["0.25.0"], + "vulnerable_ranges": [ + [ + "0.0.0", + "0.24.2" + ] + ], + "cwe": ["CWE-346"], + "tldr": "esbuild does not validate the origin of requests, allowing any website to make requests to the development server when esbuild is actively running. This could expose the source code generated or used by esbuild.", + "doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.", + "how_to_fix": "Upgrade esbuild to the patch version (0.25.0).", + "vulnerable_to": "Origin Validation Error", "related_cve_id": "", - "language": "", - "severity_class": "", - "aikido_score": 0, - "changelog": "" + "language": "JS", + "severity_class": "LOW", + "aikido_score": 20, + "changelog": "https://github.com/evanw/esbuild/blob/bcc77fbee56ec7c050813c972d8bb1e06a8e57ef/CHANGELOG.md?plain=1#L72" }