Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel erofs-utils version v1.6, which stems from a heap buffer overflow problem found in the erofsfsckdirentiter function in...

CVE-2023-33551

Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...

Moderate: Red Hat Security Advisory: Migration Toolkit for Runtimes security update

Migration Toolkit for Runtimes 1.1.0 release Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

MAL-2023-1285 Malicious code in rfs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...

Malicious code in rfs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...

Prototype Pollution

@antfu/utils is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the deepMerge function of object.js which allows an attacker to inject and modify malicious properties such as proto, resulting in prototype pollution...

@0x-jerry/x-release (>=0.0.2, <=0.3.6), @_igetter/yxtvant (>=1.0.1, <=1.0.2) +451 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7, <=0.7.2)

@antfu/utils NPM version =0.1.7, =0.0.2, =1.0.1, =1.1.10, =0.0.2, =1.0.0-rc2, =0.0.0, =1.15.0, =0.3.0-beta.2, =0.5.3, =1.6.24, =1.0.2, =0.1.1, =0.1.1, =0.1.9 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Code injection

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

CVE-2023-2972 describes a prototype pollution vulnerability in the GitHub repository antfu/utils prior to 0.7.3. The issue is confirmed across multiple sources (NVD/OSV/GHSA) as a prototype contamination in the utility’s codebase. Reported impact in the CVE data indicates high-level risk, but the...

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972: Improperly Controlled Modification of Object Prototype Attributes

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

utils 安全漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in versions of utils prior to 0.7.3 that stems from the presence of prototype contamination...

PT-2023-22371 · Unknown · Antfu/Utils

Name of the Vulnerable Software and Affected Versions: antfu/utils versions prior to 0.7.3 Description: The issue is related to Prototype Pollution in the GitHub repository antfu/utils. Recommendations: For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

powerpc-utils bug fix and enhancement update

An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...