141 matches found
Prototype Pollution in Proto
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
Prototype Pollution
Proto is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the merge function...
CVE-2021-23426
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
Design/Logic Flaw
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
CVE-2021-23426
Proto is vulnerable to prototype pollution via the merge function across all versions. The root cause is an unsafe recursive merge (and related path-based pollution) that can inject properties into Object.prototype (proto , constructor, prototype). Potential impact includes DoS and possible remot...
CVE-2021-23426 Prototype Pollution
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
CVE-2021-23426
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
CVE-2021-23426: Undefined Security Weakness
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
Prototype Pollution
Overview Proto is an An extensible program-code-template for creating objects Affected versions of this package are vulnerable to Prototype Pollution. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function. PoC var proto = require'Proto...
Unspecified vulnerability in ts-nodash
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
Input validation
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403 Prototype Pollution
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
ts-nodash 安全漏洞
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
CVE-2021-23403: Improperly Controlled Modification of Object Prototype Attributes
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
GHSA-3R8W-MPHV-2F3F Prototype Pollution in lutils
All versions of package lutils are vulnerable to Prototype Pollution via the main merge function...