bjohansebas

hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass

body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement

webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

multer vulnerable to Denial of Service via incomplete cleanup of aborted uploads