@stryker-mutator/core (>=8.0.0, <=8.7.0), @stryker-mutator/cucumber-runner (>=8.0.0, <=8.7.0) +10 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=8.0.0, <=8.7.0)

@stryker-mutator/util NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.2, =1.0.7, =1.0.14 Source cves: CVE-2024-57085 Source advisory: GHSA-9J5Q-479X-43G2...

GHSA-9J5Q-479X-43G2 @stryker-mutator/util vulnerable to Prototype Pollution

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@stryker-mutator/core (>=8.0.0, <=8.7.0), @stryker-mutator/cucumber-runner (>=8.0.0, <=8.7.0) +10 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=8.0.0, <=8.7.0)

@stryker-mutator/util NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.2, =1.0.7, =1.0.14 Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...

@stryker-mutator/util vulnerable to Prototype Pollution

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57085

The @stryker-mutator/util (NPM) library, version v8.6.0 , contains a prototype pollution vulnerability in the deepMerge function. An attacker can exploit this by supplying a crafted payload to trigger a Denial of Service (DoS) . This vulnerability affects several other packages with transitive de...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57085: Uncontrolled Resource Consumption

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@code-dungeon/yardstick (>=0.0.3, <=0.0.17), @kcutils/color (0.2.0-rc.3) +39 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=0.0.1, <=8.7.0)

@stryker-mutator/util NPM version =0.0.1, =0.0.3, =0.2.0-rc.0, =1.1.0, =1.0.0-alpha.3, =1.1.59, =1.0.0, =1.0.0, =5.2.0, =8.7.0 and more Source cves: CVE-2024-57085 Source advisory: MEND:CVE-2024-57085...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in copy_params_to_dynamic_space

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5334945941225472 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

wamr:wasm_mutator_fuzz_loader: Heap-buffer-overflow in wasm_loader_prepare_bytecode

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=6721885588488192 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wasmmutatorfuzzloader Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

WS-2023-0113

A hop-by-hop abuse was found in oathkeeper. Downstream services relying on the presence of headers set by the header mutator could be exploited. A client can drop the header set by the header mutator by including that header's name in the Connection header. The X-Subject header will not arrive at...

libprotobuf-mutator:libxml2_example: Bad-cast to xmlParserNsExtraxmlParserNsPush in xmlParseStartTag2

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=6186549981020160 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerubsanlibprotobuf-mutator Platform Id: linux Crash Type: Bad-cast Cra...

libprotobuf-mutator:libxml2_example: Heap-buffer-overflow in xmlParseCommentComplex

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=4988342930112512 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerasanlibprotobuf-mutator Platform Id: linux Crash Type:...

Hop-by-hop abuse to malform header mutator

Impact Downstream services relying on the presence of headers set by the header mutator could be exploited. A client can drop the header set by the header mutator by including that header's name in the Connection header. Example minimal config: yaml - id: 'example' upstream: url:...

GHSA-W9MR-28MW-J8HG Hop-by-hop abuse to malform header mutator

Impact Downstream services relying on the presence of headers set by the header mutator could be exploited. A client can drop the header set by the header mutator by including that header's name in the Connection header. Example minimal config: yaml - id: 'example' upstream: url:...

libprotobuf-mutator:libxml2_example: Global-buffer-overflow in xmlSkipBlankChars

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=4682788210343936 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerasanlibprotobuf-mutator Platform Id: linux Crash Type:...

libprotobuf-mutator:libxml2_example: Global-buffer-overflow in xmlParseQName

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=6253820054470656 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerasanlibprotobuf-mutator Platform Id: linux Crash Type:...