EUVD-2023-1736

Malicious code in bioql PyPI...

dummy-package-six (>=1.0.0 <=1.0.3), dummy-package-three (=1.0.0) +10 more potentially affected by CVE-2023-26135 via flatnest (>=0.2.2 <=1.0.0)

flatnest NPM version =0.2.2, =1.0.0, =0.1.0, =0.1.0, =1.0.0, =0.0.1, =0.1.3, =0.10.10, =0.0.1, =0.1.0, =0.0.1, =0.2.0 Source cves: CVE-2023-26135 Source advisory: OSV:GHSA-7PX2-3C2P-Q4V4...

GHSA-7PX2-3C2P-Q4V4 flatnest Prototype Pollution vulnerability

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest function in flatnest/nest.js file...

37sy-build (>=1.0.0 <=1.3.3), @emintayfur/hub (>=0.0.1 <=0.1.2) +117 more potentially affected by CVE-2023-26135 via flatnest (>=0.2.2 <=1.0.1)

flatnest NPM version =0.2.2, =1.0.0, =0.0.1, =0.5.10, =0.1.2, =1.0.71, =1.0.23, =1.0.1, =1.2.1, =0.0.1-1, =1.0.1, =1.0.10, =1.0.0, =0.0.1, =1.0.6 and more Source cves: CVE-2023-26135 Source advisory: SNYK:JS-FLATNEST-3185149...