3081 matches found
Prototype pollution in json8-merge-patch
Prototype pollution vulnerability in json8-merge-patch npm package 1.0.3 may allow attackers to inject or modify methods and properties of the global object constructor...
GHSA-H68Q-55JF-X68W Prototype pollution in chart.js
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...
Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype...
Use of Potentially Dangerous Function in mixme
Impact In Node.js mixme v0.5.0, an attacker can add or alter properties of an object via 'proto' through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denia...
编号撤回
Npm mixme is an application from the American company Npm. It is used to recursively merge multiple objects. The last object takes precedence over previous objects. A security vulnerability exists in Npm mixme version v0.5.0, which can be exploited by an attacker to add or modify properties of an...
Prototype Pollution
Overview Versions of merge before 2.1.1 are vulnerable to Prototype Pollution via recursiveMerge . Recommendation Upgrade to version 2.1.1 or later References - CVE - GitHub Advisory...
0726react (=0.1.1), 11-builder (=0.1.0) +16023 more potentially affected by CVE-2020-28499 via merge (>=1.0.0 <=2.1.0)
merge NPM version =1.0.0, =1.0.0, =0.0.1, =3.0.2, =0.1.0, =1.0.0, =0.0.1, =1.0.3, =0.1.4, =1.0.0-beta.1, =1.0.0-beta.2 - 960.css =1.0.0 and more Source cves: CVE-2020-28499 Source advisory: OSV:GHSA-7WPW-2HJM-89GP...
GHSA-7WPW-2HJM-89GP Prototype Pollution in merge
All versions of package merge 2.1.1 are vulnerable to Prototype Pollution via recursiveMerge...
Prototype Pollution in merge
All versions of package merge 2.1.1 are vulnerable to Prototype Pollution via recursiveMerge...
CVE-2021-28860
In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via 'proto' through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential...
CVE-2021-31996
An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in mergesort::merge...
Double free
An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in mergesort::merge...
CVE-2021-31996
CVE-2021-31996 affects the Rust crate algorithmica (up to 2021-03-07). The issue is a double free in merge_sort::merge(), where the function can duplicate and drop ownership of elements (T) without guarding against double-free when called on Vec. The Red Hat, OSV, and GitHub advisories corroborat...
CVE-2021-31996
An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in mergesort::merge...
Node.js mixme 安全漏洞
Npm mixme is an application from the American company Npm. It is used to recursively merge multiple objects. The last object takes precedence over previous objects. A security vulnerability exists in Node.js mixme 0.5.0, which can be exploited by an attacker to add or change the properties of an...
PT-2021-17969
Name of the Vulnerable Software and Affected Versions: Node.js mixme versions prior to 0.5.1 Description: The issue allows an attacker to add or alter properties of an object via proto through the mutate and merge functions. The polluted attribute will be directly assigned to every object in the...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in algorithmica crate for Rust version 2021-03-07 and earlier, which stems from a double free in merge sort::merge.No details of the vulnerability are available a...
[SECURITY] Fedora 34 Update: perl-Net-CIDR-Lite-0.22-1.fc34
Faster alternative to Net::CIDR when merging a large number of CIDR address ranges. Works for IPv4 and IPv6 addresses...
