163 matches found
CVE-2021-23561
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23663
All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...
Design/Logic Flaw
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23663
All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...
CVE-2021-23663
CVE-2021-23663 affects the JavaScript package sey across all versions, with prototype pollution via deepmerge(). The attackable component is the deepmerge() function, enabling property injection into Object.prototype and potential DoS or remote code execution. The connected sources confirm all ve...
CVE-2021-23561
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23561 Prototype Pollution
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23561
CVE-2021-23561 affects the npm package comb, where the deepMerge() function enables Prototype Pollution. The vulnerability arises from unsafe recursive merge and path-based property assignment, allowing an attacker to modify Object.prototype properties (e.g., proto , constructor, prototype). Docu...
CVE-2021-23561
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
CVE-2021-23663
All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...
CVE-2021-23663: Improperly Controlled Modification of Object Prototype Attributes
All versions of package sey are vulnerable to Prototype Pollution via the deepmerge function...
PT-2021-15543
Name of the Vulnerable Software and Affected Versions sey versions all Description The issue concerns Prototype Pollution via the deepmerge function. This affects all versions of the package, allowing for potential manipulation of the prototype chain. Recommendations For all versions, consider...
PT-2021-15537
Name of the Vulnerable Software and Affected Versions comb affected versions not specified Description The issue concerns Prototype Pollution via the deepMerge function. This affects all versions of the package comb. There is no information provided about the estimated number of potentially...
Eserozvataf Sey 代码问题漏洞
Eserozvataf Sey is a simple JavaScript bundler with declarative and simple configuration. A code issue vulnerability exists in Eserozvataf Sey, which arises from the product's susceptibility to prototype contamination by the deepmerge function. The following products and versions are affected:...
CVE-2021-23561: Improperly Controlled Modification of Object Prototype Attributes
All versions of package comb are vulnerable to Prototype Pollution via the deepMerge function...
Prototype Pollution
Overview comb is a framework for node Affected versions of this package are vulnerable to Prototype Pollution via the deepMerge function. PoC: // PoC.js var deepMerge = require"comb/lib/base/object.js".deepMerge var obj = var maliciouspayload = '"proto":"polluted":"Yes! Its Polluted"';...
Prototype Pollution
Overview sey is a Simple JavaScript build tool with declarative and easy configuration Affected versions of this package are vulnerable to Prototype Pollution via the deepmerge function. PoC // Create the following PoC file: // PoC.js var deepmerge = require"sey/lib/utils/deepmerge.js" var obj =...
@deansel/latte (>=0.1.2-beta.1, <=0.1.2-beta.7), @ibuk/epubjs-rn (>=0.2.40, <=0.2.43) +49 more potentially affected by CVE-2021-3820 via i (>=0.2.0, <=0.3.6)
i NPM version =0.2.0, =0.1.2-beta.1, =0.2.40, =0.2.38, =0.3.25, =0.2.33, =4.0.0-beta.6, =0.2.5, =0.6.0, =0.1.5, =0.0.2, =0.2.37, =0.0.1, =0.0.3 and more Source cves: CVE-2021-3820 Source advisory: OSV:GHSA-X55W-VJJP-222R...
@cookiex/class-state (>=0.0.1, <=0.0.2), @cookiex/cli (>=0.2.10, <=0.2.11-0) +3 more potentially affected by CVE-2021-23442 via @cookiex/deep (>=0.0.1, <=0.0.6)
@cookiex/deep NPM version =0.0.1, =0.0.1, =0.2.10, =0.0.0-0.1, =0.1.2, =0.1.3 Source cves: CVE-2021-23442 Source advisory: OSV:GHSA-92V9-XH2Q-FQ9F...
