
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
works with Google Speech and Microsoft Azure Cognitive services to compare the results of Speech-to-text transcription
Configuration:
//GOOGLE Speech
//install Google cloud SDK // init profile // init service account and obtain credentials file // set up env variable pointing to credentials file set GOOGLE_APPLICATION_CREDENTIALS= or add to launch.json
"env": {
"GOOGLE_APPLICATION_CREDENTIALS": "C:\\Users\\Administrator\\Documents\\JS\\speechtext\\speechtext\\speech-accuracy-test-068ed929ed28.json"
}
//Install google client packages npm i @google-cloud/speech
//Microsoft setup // Subscribe for Speech service and obtain API Keys // install microsoft Speech SDK npm install microsoft-cognitiveservices-speech-sdk
What it does: takes preconfigured file from /resources and sends it to both Google and Microsoft Asure Speech services
example:
[Google]: how old is the Brooklyn Bridge sample-google.js:36 [Microsoft]Now recognizing from: ./resources/audio.raw sample-ms.js:39 [Microsoft] How old is the Brooklyn bridge? sample-ms.js:45 [{"provider":"google","transcription":"how old is the Brooklyn Bridge"},{"provider":"microsoft","transcription":"How old is the Brooklyn bridge?"}]
FAQs
works with Google Speech and Microsoft Azure Cognitive services to compare the results of Speech-to-text transcription
The npm package speechtext receives a total of 0 weekly downloads. As such, speechtext popularity was classified as not popular.
We found that speechtext demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.