6419 matches found
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57077
The utils-extend library (version 1.0.8 ) is vulnerable to Prototype Pollution via the lib.extend function. An attacker can provide a payload containing an Object.prototype setter to modify properties within the global prototype chain, leading to a denial of service (DoS) . While no specific patc...
xe-utils 安全漏洞
xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...
PT-2025-5751 · Xe-Utils · Xe-Utils
Name of the Vulnerable Software and Affected Versions: xe-utils version 3.5.31 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 3.5.31, consider disabling the lib.merge...
CVE-2024-57074
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57074
The JavaScript library xe-utils (specifically version v3.5.31 ) is vulnerable to Prototype Pollution within the lib.merge function. An attacker can exploit this by supplying a crafted payload to inject properties into the global Object.prototype chain. This can lead to a Denial of Service (DoS) b...
CVE-2024-57074: Uncontrolled Resource Consumption
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57077: Improperly Controlled Modification of Object Prototype Attributes
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
utils-extend 安全漏洞
utils-extend is an extension by nothing individual developer. A security vulnerability exists in utils-extend, which stems from the lib.extend function containing a prototype contamination vulnerability...
Malicious code in apple-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...
MAL-2025-1019 Malicious code in apple-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...
Malicious code in utils-pencaws (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1002 Malicious code in utils-pencaws (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1001 Malicious code in utils-hex (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1000 Malicious code in utils-eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in utils-eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13
CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13. A patched version of the package is available...
Malicious code in common-test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...