1st-20200429 (1.1.0), 3vot-clay (2.0.1) +1808 more potentially affected by CVE-2021-23413 via jszip (>=2.1.1, <=2.6.1)

jszip NPM version =2.1.1, =0.3.1, =4.0.1, =1.0.2, =1.0.0, =1.0.1, =1.4.11-bleeding.0, =0.0.1, =1.0.0, =2.5.1, =0.0.1, =0.1.2 and more Source cves: CVE-2021-23413 Source advisory: OSV:GHSA-JG8V-48H5-WGXG...

20-exceljs (>=4.5.7, <=4.5.9), 88slot-ap (1.0.0) +744 more potentially affected by CVE-2021-23413 via jszip (>=3.0.0, <=3.6.0)

jszip NPM version =3.0.0, =4.5.7, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.0.37, =0.0.36, =0.0.37, =0.20.0-20191013002840, =16.14.0-100, =16.14.0-101 and more Source cves: CVE-2021-23413 Source advisory:...

jszip Vulnerable to Prototype Pollution

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

A flaw was found in JSZip. Crafting a new zip file with filenames set to Object prototype values ex. proto, toString, etc. results in a returned object with a modified prototype instance. The highest threat from this vulnerability is to system availability...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

DEBIAN-CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

UBUNTU-CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

CVE-2021-23413 affects jszip before 3.7.0. Crafting a ZIP with filenames equal to Object prototype properties (e.g., proto , toString) yields a returned object with a modified prototype. The connected IBM document confirms the CVE and description but provides no explicit remediation or patch vers...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413 Denial of Service (DoS)

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

CVE-2021-23413: Undefined Security Weakness

This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with a modified prototype instance...

jszip 安全漏洞

jszip is a JavaScript library for creating, reading and editing .zip files. A security vulnerability exists in jszip versions prior to 3.7.0, which stems from the fact that when a new zip file is created with the filename set to an object prototype value, an object with a modified instance of the...

PT-2021-6839

Name of the Vulnerable Software and Affected Versions jszip versions prior to 3.7.0 Description The issue is related to the incorrect handling of file names in the jszip library. It allows a remote attacker to cause a denial of service by crafting a new zip file with filenames set to Object...

20-exceljs (>=4.5.7, <=4.5.9), 88slot-ap (1.0.0) +744 more potentially affected by CVE-2021-23413 via jszip (>=3.0.0, <=3.6.0)

jszip NPM version =3.0.0, =4.5.7, =0.2.48, =0.2.50, =0.2.46, =0.2.46, =0.2.46, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.5-20190507210024, =0.0.37, =0.0.36, =0.0.37, =0.20.0-20191013002840, =16.14.0-100, =16.14.0-101 and more Source cves: CVE-2021-23413 Source advisory:...

Denial of Service (DoS)

Overview jszip is a Create, read and edit .zip files with JavaScript http://stuartk.com/jszip Affected versions of this package are vulnerable to Denial of Service DoS. Crafting a new zip file with filenames set to Object prototype values e.g proto, toString, etc results in a returned object with...