
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
A tool to save and load the docker image tarball file.
mkvirtualenv dih
pip install dih
Load docker image with specific folder or file
dih load -f ./archives
Load docker image with manual selection
dih load -f ./archives --select
Enter the index of the docker images...
Load docker image with specific folder and verify with compose file.
dih load -f ./archives -c <path/to/compose>
Verify with compose file and only load the verified indexes...
Save docker image into tarball file.
dih save -f ./archives
Filter with specific rule, includes something and excludes something.
dih save -f ./archives -inc innodisk -exc none
dih save -f ./archives -inc rtsp -exc none...
dih load --help
Usage: dih load [OPTIONS]
Options:
-f, --folder PATH Path to the folder. [required]
-c, --compose-file PATH Path to compose file.
-s, --select Select by index.
--debug Only display the information.
--help Show this message and exit.
dih save --help
Usage: dih save [OPTIONS]
Options:
-f, --folder TEXT Path to the folder. [required]
-inc, --includes TEXT Include keys.
-exc, --excludes TEXT Exclude keys.
--debug Only display the information.
--help Show this message and exit.
python 3.10
mkvirtualenv dih
pip install -r requirements.txt
Docker engine
Usage: ./docker/handler.sh [mode] [ubuntu] [command]
Options:
- mode: build|run
- ubuntu: focal|20.04|jammy|22.04
- command: only supported when 'handler.sh run'. e.g."bash"
# Build docker image
./docker/handler.sh build focal
# Run docker container with specific version and command
./docker/handler.sh run focal "bash"
pytest -v
pytest --doctest-modules --junitxml=junit/test-results.xml --cov=. --cov-report=xml --cov-report=html
python3 -m pip install --upgrade build
sudo apt install python3.10-venv
python3 -m build
twine upload dist/*
FAQs
A tool to save and load the docker image tarball file
We found that dih demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.