编号撤回

“form” is a form state management program developed by TanStack. “R” is a statistical computing software provided by The R Foundation. This CVE number has been withdrawn...

EUVD-2024-53513

Malicious code in bioql PyPI...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. form is an open source form state management program from TanStack. A security vulnerability exists in Google Chrome that stems from an improper implementation of the picture-in-picture feature...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

GHSA-GGV3-VMGW-XV2Q @tanstack/form-core prototype pollution

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@account-kit/react (>=4.0.0-alpha.0, <=4.88.5), @account-kit/react-native (>=4.15.0, <=4.88.5) +52 more potentially affected by CVE-2024-57068 via @tanstack/form-core (>=0.0.1, <=0.42.0)

@tanstack/form-core NPM version =0.0.1, =4.0.0-alpha.0, =4.15.0, =3.13.0, =0.0.1, =0.1.1, =0.0.1, =1.0.0, =0.3.5, =0.3.3, =5.0.0 and more Source cves: CVE-2024-57068 Source advisory: OSV:GHSA-GGV3-VMGW-XV2Q...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57068

The @tanstack/form-core library, specifically version v0.35.0 , is vulnerable to a prototype pollution flaw. This vulnerability originates from improper handling of object properties within the lib.mutateMergeDeep function. An attacker can exploit this by supplying a crafted payload to inject pro...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

form 安全漏洞

form is an open source form state management program from TanStack. A security vulnerability exists in form version v0.35.0, which stems from the lib.mutateMergeDeep function containing a prototype contamination vulnerability...