security.nuyts.tech
CVE-2018-6333 – NuytsTech Security
The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be use