kelseyhightower / nocode

The best way to write secure and reliable applications. Write nothing; deploy nowhere.
Apache License 2.0
60.39k stars 4.71k forks source link

There is zero day exploit! #5062

Open nodirnasirov opened 1 year ago

nodirnasirov commented 1 year ago

If you look here: ` The bad actor can easily do ` and get access to server internals!

Inderix commented 1 year ago

This is a serious bug, I've seen it as well on my installation. Relevant system information: OS: CPU: RAM: GB GPU:

My proposed fix is to Then, This is only a band-aid solution until someone more experienced than me to look into this.

lo2dev commented 1 year ago

I can reproduce as well

xnousnow commented 1 year ago

That should be rated 5/5.

ajskateboarder commented 1 year ago

I was able to fix this by removing the code It should be secure once you remove the code