Linux Distros Unpatched Vulnerability : CVE-2021-23432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge CVE-2021-23432 Note that Nessus relies on the...

@fley_real/notification-manager (1.0.0), @nbish11/test (>=1.0.2, <=1.2.0) +53 more potentially affected by CVE-2021-23432 via mootools (>=1.3.2, <=1.5.2)

mootools NPM version =1.3.2, =1.0.2, =0.1.2, =0.1.0, =0.8.3, =1.0.0, =0.9.3, =1.3.0, =0.0.2, =0.4.0, =0.2.0, =0.2.0, =1.0.5, =2.0.2 and more Source cves: CVE-2021-23432 Source advisory: OSV:GHSA-X6HX-7GH3-3Q98...

CVE-2021-23432

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge...

CVE-2021-23432

CVE-2021-23432 affects all versions of the mootools library. The root cause is the ability to pass untrusted input to Object.merge() , leading to prototype pollution . Several connected sources confirm the issue and the affected component, with CVSS values indicating high to critical impact (netw...

CVE-2021-23432 Prototype Pollution

This affects all versions of package mootools. This is due to the ability to pass untrusted input to Object.merge...

@fley_real/notification-manager (1.0.0), @nbish11/test (>=1.0.2, <=1.2.0) +53 more potentially affected by CVE-2021-23432 via mootools (>=1.3.2, <=1.5.2)

mootools NPM version =1.3.2, =1.0.2, =0.1.2, =0.1.0, =0.8.3, =1.0.0, =0.9.3, =1.3.0, =0.0.2, =0.4.0, =0.2.0, =0.2.0, =1.0.5, =2.0.2 and more Source cves: CVE-2021-23432 Source advisory: SNYK:JS-MOOTOOLS-1325536...