@alfresco/adf-testing (6.0.0-A.2-8258), @avnet-iotc/iotc-demo (1.0.0-beta-2) +121 more potentially affected by CVE-2024-27088 via es5-ext (>=0.10.53, <=0.10.62)

es5-ext NPM version =0.10.53, =0.30.77, =0.30.77, =0.29.0, =0.29.0, =0.29.0, =0.30.46, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.29.0, =0.30.66 and more Source cves: CVE-2024-27088 Source advisory: OSV:GHSA-4GMJ-3P3H-GM8H...

CVE-2024-27088

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

CVE-2024-27088

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

UBUNTU-CVE-2024-27088

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

CVE-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

CVE-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

CVE-2024-27088

CVE-2024-27088 affects the es5-ext library, which provides ECMAScript 5 extensions. The issue arises when passing functions with very long names or complex default argument names into the library’s copy or toStringTokens routines, potentially causing the script to stall. The vulnerability is publ...

es5-ext Security Vulnerability

es5-ext is an ECMAScript extension from the individual developer Mariusz Nowak. A security vulnerability exists in es5-ext prior to v0.10.63, which stems from the use of functions with very long names or complex default parameter names that may cause the script to halt...

CVE-2024-1257

A vulnerability was found in Jspxcms 10.2.0. It has been classified as problematic. Affected is an unknown function of the file /ext/collect/findtext.do. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

TYPO3-EXT-SA-2023-011: Configuration Injection in extension "Direct Mail" (direct_mail)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-011...

kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nftpipaporemove function with the element, without a NFTSETEXTKEYEND. This issue could allow a local user to crash the system or potentially escalate their privileges on the system...

TYPO3-EXT-SA-2023-009: Insecure Direct Object Reference in extension "Content Consent" (content_consent)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-009...

TYPO3-EXT-SA-2023-009: Insecure Direct Object Reference in extension "Content Consent" (content_consent)

More info at https://typo3.org/security/advisory/typo3-ext-sa-2023-009...

Malicious code in ext-frontend-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23a7d0539d44404b1c2e340d011eaa58dcad96a27d7d6aef90736d641da7ce39 The OpenSSF Package Analysis project identified 'ext-frontend-identity' @ 7.1.1-develop.9 npm as malicious. It is considered malicious because: ...

MAL-2023-8516 Malicious code in ext-frontend-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23a7d0539d44404b1c2e340d011eaa58dcad96a27d7d6aef90736d641da7ce39 The OpenSSF Package Analysis project identified 'ext-frontend-identity' @ 7.1.1-develop.9 npm as malicious. It is considered malicious because: ...

Malicious code in ext-frontend-esignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6 The OpenSSF Package Analysis project identified 'ext-frontend-esignature' @ 2.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-8513 Malicious code in ext-frontend-esignature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcffa9ade419d008513b815bd316ec2f2100a8a3510b692cb84a11ca2e5b2ac6 The OpenSSF Package Analysis project identified 'ext-frontend-esignature' @ 2.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-8398 Malicious code in @tpci/i18next-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a4fd8041934f617af9e84fb00ca939b961316d3d7b9519c286dd93035801c8 The OpenSSF Package Analysis project identified '@tpci/i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8397 Malicious code in i18next-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e71c3a73449651c3bbbef4cc540bb5df6e12736e304e95a5a64f2c0c9f55189 The OpenSSF Package Analysis project identified 'i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in i18next-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e71c3a73449651c3bbbef4cc540bb5df6e12736e304e95a5a64f2c0c9f55189 The OpenSSF Package Analysis project identified 'i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...