
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
S3deploy is a tool for deploying static websites to Amazon S3.
Add this line to your application's Gemfile:
gem 's3deploy'
And then execute:
$ bundle
Or install it yourself as:
$ gem install s3deploy
Get an Amazon AWS account and create the bucket you want to use. Set up the bucket to be used as a website.
Create a folder configuration file like this:
$ s3deploy init
Then update the newly created .s3deploy.yml with your settings (comments in the generated file explains how to set it). You might want to create a default configuration file where you can store information shared between sites, like Amazon access key, secret and region. You do that with this command:
$ s3deploy init --default
This configuration file will be created in your home directory in the .s3deploy folder. Update this file with your info, remember that the settings in the .s3deploy.yml in the project folder takes precedance over settings in this file.
Deploying is easy now, just type:
$ s3deploy
If you want to test-drive your configuration you can simulate a deploy
$ s3deploy simulate
If you want to empty a bucket, you can do it with this command:
$ s3deploy empty
But beware that all files will be removed, you can simulate emptying the bucket with:
$ s3deploy simulate empty
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that s3deploy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.