MAL-2024-3073 Malicious code in symbl-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2656 Malicious code in meechum-user-lib-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2442 Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discord.js-invites (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1958 Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1700 Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2490 Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2033 Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

AZL-45066 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

Object Resolver Prototype Pollution

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

GHSA-QJ86-V6M7-4QV2 Object Resolver Prototype Pollution

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

CVE-2024-36577

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

PT-2024-27076 · Unknown · Js-Object-Resolver

Name of the Vulnerable Software and Affected Versions: js-object-resolver versions prior to 3.1.1 Description: The issue allows for Prototype Pollution via the setNestedProperty function of the Module. This can potentially lead to unintended behavior or security issues. Recommendations: For...

CVE-2024-36577

The @apphp/object-resolver (or js-object-resolver ) library, specifically versions prior to 3.1.1 , is vulnerable to Prototype Pollution . The root cause is the Module.setNestedProperty function, which allows for the manipulation of the prototype by an attacker. This vulnerability could potential...