cached-path-relative 安全漏洞

cached-path-relative is an open source npm package. A security vulnerability exists in cached-path-relative prior to version 1.1.0, which stems from a problematic implementation of cache variable settings. The software is susceptible to prototype contamination...

CVE-2021-23518: Improperly Controlled Modification of Object Prototype Attributes

The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

@stackstorm/st2-build (>=2.3.1, <=2.4.3), ccxt-without-theocean (1.18.151) +3 more potentially affected by CVE-2021-23518 via cached-path-relative (1.0.2)

cached-path-relative NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cached-path-relative and may be impacted: - @stackstorm/st2-build =2.3.1, =1.0.0, =1.18.173, =1.18.242 Source cves: CVE-2021-23518 Source advisory:...

Prototype Pollution

Overview cached-path-relative is a memoize the results of the path.relative function. Affected versions of this package are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent...

CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

Prototype Pollution in cached-path-relative

Version of cached-path-relative before 1.0.2 are vulnerable to prototype pollution. Recommendation Update to version 1.0.2 or later...

Design/Logic Flaw

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

DEBIAN-CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

UBUNTU-CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

PT-2018-13595 · Npm · Cached-Path-Relative

Name of the Vulnerable Software and Affected Versions: cached-path-relative versions =1.0.1 Description: A prototype pollution attack allows an attacker to inject properties on Object.prototype, which are then inherited by all the JS objects through the prototype chain, causing a Denial of Servic...

CVE-2018-16472

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

CVE-2018-16472: Uncontrolled Resource Consumption

A prototype pollution attack in cached-path-relative versions =1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack...

CVE-2018-16472

CVE-2018-16472 affects the Node.js module cached-path-relative (versions ≤ 1.0.1). The issue is prototype pollution: an attacker can inject properties on Object.prototype, which are then inherited by all objects and can lead to denial of service. Connected sources confirm the vulnerable component...

Prototype Pollution

cached-path-relative is vulnerable to a prototype pollution attack. Attackers can add or modify existing properties relating to an Object by using the utilities function to change the prototype of said Object. Using this flaw, attackers can trigger denial of service DoS attacks and in some...

Node.js third-party modules: Prototype Pollution Vulnerability in cached-path-relative Package

I would like to report a prototype pollution attack in cached-path-relative. It allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain. Module module name: cached-path-relative version: 1.0.1 npm page:...