88 matches found
CVE-2024-39853
adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39000
The ratio-swiper library (v0.0.2) by adolph_dudu is vulnerable to a prototype pollution flaw within the parse function. This vulnerability allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary workaround, i...
CVE-2024-38997
adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38997
The adolph_dudu ratio-swiper library, specifically version v0.0.2 , is vulnerable to prototype pollution through the extendDefaults function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary ...
MAL-2024-58 Malicious code in @linesearch/swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @linesearch/swiper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6377 Malicious code in swiper-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in swiper-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in swiper-bundie (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e1b659b47e3a72ea3f7e5f575acb49c0035c7a26095e57423c15e594d0161d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Prototype Pollution
Overview Versions of swiper before 6.5.1 are susceptible to prototype pollution. Recommendation Upgrade to version 6.5.1 or later References - CVE - GitHub Advisory...
GHSA-P3HC-FV2J-RP68 Prototype Pollution in swiper
Versions of the package swiper before 6.5.1 are susceptible to prototype pollution...
@alicd/oc-address (>=0.1.0-beta.0, <=0.1.3), @alicd/oc-table (>=0.0.1-beta.0, <=0.0.6) +294 more potentially affected by CVE-2021-23370 via swiper (>=6.0.0, <=6.5.0)
swiper NPM version =6.0.0, =0.1.0-beta.0, =0.0.1-beta.0, =0.0.1, =2.0.0-beta.23, =0.1.0, =2.0.0-beta.0, =1.1.8, =0.1.0, =0.1.4, =0.1.0, =0.1.20, =0.1.24 - @aligov/clark-helper-plugin 0.0.8 - @aligov/clark-helper-rax 0.1.0 - @aligov/mobile-app-search 0.1.1 and more Source cves: CVE-2021-23370 Sour...
Prototype Pollution in swiper
Versions of the package swiper before 6.5.1 are susceptible to prototype pollution...
Prototype Pollution
swiper is vulnerable to Prototype Pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...
Unspecified vulnerability in Vlad Tansky swiper
Vlad Tansky swiper is a Vlad Tansky open source application . Used in mobile websites , mobile Web applications and mobile native , hybrid applications . Vlad Tansky swiper 6.5.1 version of the previous security vulnerability , there is no detailed vulnerability details provided...
CVE-2021-23370
This affects the package swiper before 6.5.1...
CVE-2021-23370
This affects the package swiper before 6.5.1...
Code injection
This affects the package swiper before 6.5.1...
CVE-2021-23370
CVE-2021-23370 affects the npm package swiper prior to 6.5.1. The root cause is prototype pollution in swiper’s code, with the impact described as vulnerable to prototype pollution. Remediation: upgrade to swiper 6.5.1 or later.