5926 matches found
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)
org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...
Prototype Pollution
Overview org.webjars.npm:xe-utils is a JavaScript 函数库、工具类 Affected versions of this package are vulnerable to Prototype Pollution through the merge function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...
CVE-2024-21505
Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting...
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57074
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57074
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57074
The JavaScript library xe-utils (specifically version v3.5.31 ) is vulnerable to Prototype Pollution within the lib.merge function. An attacker can exploit this by supplying a crafted payload to inject properties into the global Object.prototype chain. This can lead to a Denial of Service (DoS) b...
CVE-2024-57077
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
CVE-2024-57074
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
PT-2025-5751 · Xe-Utils · Xe-Utils
Name of the Vulnerable Software and Affected Versions: xe-utils version 3.5.31 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 3.5.31, consider disabling the lib.merge...
CVE-2024-57077
The utils-extend library (version 1.0.8 ) is vulnerable to Prototype Pollution via the lib.extend function. An attacker can provide a payload containing an Object.prototype setter to modify properties within the global prototype chain, leading to a denial of service (DoS) . While no specific patc...
CVE-2024-57077: Improperly Controlled Modification of Object Prototype Attributes
The latest version of utils-extend 1.0.8 is vulnerable to Prototype Pollution through the entry functions lib.extend. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service DoS a the minimum...
utils-extend 安全漏洞
utils-extend is an extension by nothing individual developer. A security vulnerability exists in utils-extend, which stems from the lib.extend function containing a prototype contamination vulnerability...
xe-utils 安全漏洞
xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...
CVE-2024-57074: Uncontrolled Resource Consumption
A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
Malicious code in apple-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...
MAL-2025-1019 Malicious code in apple-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...