CVE-2024-24293

The @bit/loader framework, specifically version v.10.0.3 , is vulnerable to a Prototype Pollution issue. The root cause is a lack of __proto property restrictions within the e argument of the M function located in index.js . This flaw can lead to arbitrary code execution . As a mitigation, user...

CVE-2024-24293: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js...