7 matches found
@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +128 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)
@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...
GHSA-HJWQ-MJWJ-4X6C @intlify/shared Prototype Pollution vulnerability
Vulnerability type: Prototype Pollution Affected Package: Product: @intlify/shared Version: 10.0.4 Vulnerability Locations: nodemodules/@intlify/shared/dist/shared.cjs:232:26 Description: The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions...
@acronis-platform/ui-component-library (1.33.0), @aesoper/i18n (>=1.0.56, <=1.0.57) +37 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)
@intlify/shared NPM version =10.0.0, =1.0.56, =1.0.0, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.3, =10.0.0-alpha.1, =10.0.0-alpha.1, =10.0.0-alpha.1, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4...
CVE-2024-52810
@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...
CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4
@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...
CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4
@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...
PT-2024-35459 · Unknown · @Intlify/Shared
Name of the Vulnerable Software and Affected Versions: @intlify/shared versions 10.0.4 Description: The issue is related to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the glob...