CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

Prototype Pollution

@cdr0/sg is vulnerable to prototype pollution. The vulnerability is due to improper handling of user-supplied inputs within ref.js , specifically allowing manipulation of the proto and constructor.prototype properties. This allows attackers to alter the behavior of all objects inheriting from the...

@cdr0/active-development (1.0.0), @cdr0/config (>=1.0.1, <=1.0.2) +6 more potentially affected by CVE-2024-36580 via @cdr0/sg (1.0.10)

@cdr0/sg NPM version 1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @cdr0/sg and may be impacted: - @cdr0/active-development 1.0.0 - @cdr0/config =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1 Source cves: CVE-2024-36580 Source advisory:...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

PT-2024-27079 · Cdr0 Sg · Cdr0 Sg

Name of the Vulnerable Software and Affected Versions: cdr0 sg version 1.0.10 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code. Recommendations: For version 1.0.10, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2024-36580

The @cdr0/sg package (version 1.0.10 ) is vulnerable to a Prototype Pollution issue. The root cause stems from improper handling of user-supplied inputs within ref.js , specifically allowing the manipulation of __proto__ and constructor.prototype properties. This flaw enables an attacker to alt...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

CVE-2024-36580

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

CVE-2024-36580: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code...

cdr0-sg security vulnerability

cdr0-sg is an application by Brian C Sparks Personal Developer. A security vulnerability exists in cdr0 sg version 1.0.10, which originates from allowing an attacker to execute arbitrary code...