PT-2025-5755 · Unknown · @Zag-Js/Core

Name of the Vulnerable Software and Affected Versions: @zag-js/core version 0.50.0 Description: A prototype pollution issue in the lib.deepMerge function allows attackers to cause a Denial of Service DoS by supplying a crafted payload. Recommendations: For @zag-js/core version 0.50.0, consider...

xe-utils 安全漏洞

xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...

Zag 安全漏洞

Zag is a framework open-sourced by Chakra. A security vulnerability exists in Zag version v0.50.0, which stems from the lib.deepMerge function containing a prototype contamination vulnerability...

PT-2025-5769 · Unknown · Expand-Object

Name of the Vulnerable Software and Affected Versions: expand-object version 0.4.2 Description: A prototype pollution in the lib function of expand-object allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For expand-object version 0.4.2, consider...

PT-2025-5767 · Dot-Qs · Dot-Qs

Name of the Vulnerable Software and Affected Versions: dot-qs version 0.2.0 Description: A prototype pollution in the lib.parse function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For dot-qs version 0.2.0, consider disabling the lib.parse...

defaults 安全漏洞

defaults is a library by the individual developer Nathan Houle. When the value of an enumerable property owned on a source object is undefined, copying that property from the source object to the target object A security vulnerability exists in defaults version v2.0.1, which stems from the lib.de...

PT-2025-5766 · Npm · @Ndhoule/Defaults

Name of the Vulnerable Software and Affected Versions: @ndhoule/defaults version 2.0.1 Description: A prototype pollution in the lib.deep function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For @ndhoule/defaults version 2.0.1, consider...

expand-object 安全漏洞

expand-object is a library by Jon Schlinkert, a personal developer, that uses simple symbols to expand strings into JavaScript objects. A security vulnerability exists in expand-object version v0.4.2, which stems from the lib function containing a prototype contamination vulnerability...

PT-2025-5754 · Unknown · Utils-Extend

Name of the Vulnerable Software and Affected Versions: utils-extend version 1.0.8 Description: The issue allows an attacker to introduce or modify properties within the global prototype chain through the lib.extend entry function, causing a denial of service DoS as the minimum consequence. This i...

CVE-2024-57063: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57069: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

MAL-2025-1042 Malicious code in lib-automotive-call-cdm (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in lib-automotive-call-cdm (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in private-lib-bug-bounty2.0 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-788 Malicious code in @wfps/wfps-common-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-25066

nDPI through 4.12 has a potential stack-based buffer overflow in ndpiaddresscacherestore in lib/ndpicache.c...

CVE-2025-25066: Stack-based Buffer Overflow

nDPI through 4.12 has a potential stack-based buffer overflow in ndpiaddresscacherestore in lib/ndpicache.c...

CVE-2025-25066

nDPI through 4.12 has a potential stack-based buffer overflow in ndpiaddresscacherestore in lib/ndpicache.c...

Malicious code in cc-component-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-640 Malicious code in cc-component-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...