VYPR

npm package

firebase-tools

pkg:npm/firebase-tools

Vulnerabilities (1)

  • CVE-2024-4128May 2, 2024
    affected < 13.6.0fixed 13.6.0

    This vulnerability was a potential CSRF attack. When running the Firebase emulator suite, there is an export endpoint that is used normally to export data from running emulators. If a user was running the emulator and navigated to a malicious website with the exploit on a browser