GHSA-77RM-9X9H-XJ3G vulnerabilities

Vulnerabilities for packages: mysql, spark-fips, hadoop-client-modules, spark, druid...

CVE-2021-22570 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-22570 vulnerabilities

Vulnerabilities for packages: mysql, spark-fips, hadoop-client-modules, spark, druid...

CVE-2021-22569 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, celeborn, druid, trino...

CVE-2021-22569 vulnerabilities

Vulnerabilities for packages: trino, druid, celeborn...

GHSA-WRVW-HG22-4M67 vulnerabilities

Vulnerabilities for packages: trino, druid, celeborn...

GHSA-WRVW-HG22-4M67 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, celeborn, druid, trino...

3m5-coco (>=0.0.2, <=0.0.981), @24hr/sentry-logger-node (>=0.4.0, <=1.2.2) +278 more potentially affected by CVE-2021-23624 via dotty (>=0.0.1, <=0.1.1)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol 1.1.2 and more Source cves: CVE-2021-23624 Source advisory: OSV:GHSA-6G47-63MV-QPGH...

GHSA-6G47-63MV-QPGH Prototype Pollution in dotty

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Prototype Pollution in dotty

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Unspecified vulnerability in Deoxxa dotty

Deoxxa Dotty is a Javascript-based code base used by Deoxxa individual developers to support access to object properties. deoxxa dotty has a security vulnerability that stems from a design or implementation impropriety in the code development process of a web-based system or product. No details o...

Prototype Pollution

dotty is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the put function and modify attributes such as proto, constructor, and prototype...

CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Type confusion

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624

CVE-2021-23624 affects the dotty package prior to v0.1.2 and describes a type confusion vulnerability that can bypass CVE-2021-25912 when user-provided path keys are arrays. The issue is consistently reported across multiple sources (NVD/OSV/GHSA/CVE List) as a prototype pollution/type confusion ...

CVE-2021-23624 Prototype Pollution

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Deoxxa dotty 安全漏洞

Deoxxa Dotty is a Javascript-based code base used by Deoxxa individual developers to support access to object properties. deoxxa dotty has a security vulnerability that stems from a design or implementation impropriety in the code development process of a web-based system or product. No details o...

3m5-coco (>=0.0.2, <=0.0.981), @24hr/sentry-logger-node (>=0.4.0, <=1.2.2) +278 more potentially affected by CVE-2021-23624 +1 more via dotty (>=0.0.1, <=0.1.1)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol 1.1.2 and more Source cves: CVE-2021-23624, CVE-2021-25912 Source advisory: SNYK:JS-DOTTY-1577292...