Threats Tagged 'brew-rollup-cve-2024-47068'
View all threats tagged with 'brew-rollup-cve-2024-47068'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'brew-rollup-cve-2024-47068'
Click on any threat for detailed analysis and mitigation recommendations
0 A DOM Clobbering vulnerability (CVE-2024-47068) exists in rollup bundled scripts when using import.meta.url with output formats cjs, umd, or iife. This vulnerability allows an attacker to manipulate document.currentScript by injecting scriptless HTML elements with a name attribute of 'currentScript', leading to cross-site scripting (XSS) by loading attacker-controlled scripts. The issue arises because rollup replaces import.meta.url with a URL derived from document.currentScript without verifying the element's tag name. A patch is available that adds type checking to ensure the element is a SCRIPT tag before using its src attribute. The vulnerability affects rollup versions >=2.56.3 and <4.22.4 and has a CVSS 3.1 score of 6.4 (medium severity). Join the discussion | GCVE Database | 08/13/2026, 17:32:32 UTC Added: 10/04/2026, 12:24:32 UTC |
Showing 1 to 1 of 1 result