writeups.xyz / Diving into Dependabot along with a bug in npm

Submitter : c2a

Date: 27 June 2021

Bounty : 8,117

Vulnerabilities :

• SSRF
• RCE

Programs :

• GitHub

Authors :

• Tyage (@Tyage)

Link :
https://blog.tyage.net/posts/2021-06-27-dependabot-rce/