
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
===========================
This is BaseX client for Node.js. It is work in progress. It uses the client interface via a socket connection to the BaseX server.
BaseX is a very light-weight, high-performance and scalable XML Database engine and XPath/XQuery 3.0 Processor, including full support for the W3C Update and Full Text extensions. Built as a lightweight Java server, BaseX also supports XSLT, Webdav and RestXQ.
To install with npm:
npm install basex
$ mkdir myproject
cd myproject
$ npm install basex
basex@0.6.0 ./node_modules/basex
Once BaseX is installed and the BaseX server is running, test it.
$ cd examples/
$ node Example.js
milliseconds: 0
{ result: '1 2 3 4 5 6 7 8 9 10',
info: '\nQuery executed in 0.38 ms.\n' }
end
close
basexserver -S
See commands.md in the docs folder for details of the API.
There is a test suite using mocha , should and sinon.
mocha -R spec test/test-commands.js
Execute info command
✓ should not error
✓ should have reply
Send an valid xquery statement: 2+2
✓ It should not error
✓ It should equal 4
Send an invalid command: 2+
✓ It should error
Create a database
✓ It should not error
Add a document
✓ It should not error
drop db database
✓ It should not error
drop db database
✓ It should not error
Send a xquery and iterate over the result items
✓ It should not error
✓ It should return an array
create query and bind
✓ It should not error
✓ It should return a string
13 tests complete (408 ms)
Parts inspired by node_redis, BaseX Java client
#license
BSD license
v0.6.2 - 2013-07-13
FAQs
A BaseX (XML database) client library
The npm package basex receives a total of 0 weekly downloads. As such, basex popularity was classified as not popular.
We found that basex demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.