UBUNTU-CVE-2025-26304

A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...

UBUNTU-CVE-2025-26307

A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26310: Exposure of Sensitive Information to an Unauthorized Actor

Multiple memory leaks have been identified in the ABC file parsing functions parseABCCONSTANTPOOL and parseABCFILE in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted ABC file...

CVE-2025-26304

A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...

CVE-2025-26304: Improper Clearing of Heap Memory Before Release

A memory leak has been identified in the parseSWFEXPORTASSETS function in util/parser.c of libming v0.4.8...

CVE-2025-26308

A memory leak exists in the parseSWF_FILTERLIST function within util/parser.c of libming v0.4.8 . This vulnerability allows an attacker to trigger a denial of service (DoS) by providing a specially crafted SWF file . As of the current documentation, there is no information regarding a newer versi...

CVE-2025-26306: Missing Release of Memory after Effective Lifetime

A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted file...

PT-2025-7597 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the readSizedString function in util/read.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For libming version 0.4.8, consider...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@stryker-mutator/util vulnerable to Prototype Pollution

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@stryker-mutator/core (>=8.0.0, <=8.7.0), @stryker-mutator/cucumber-runner (>=8.0.0, <=8.7.0) +10 more potentially affected by CVE-2024-57085 via @stryker-mutator/util (>=8.0.0, <=8.7.0)

@stryker-mutator/util NPM version =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.0.0, =8.2.2, =1.0.7, =1.0.14 Source cves: CVE-2024-57085 Source advisory: OSV:GHSA-9J5Q-479X-43G2...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5772 · Cli-Util · Cli-Util

Name of the Vulnerable Software and Affected Versions: cli-util version 1.1.27 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 1.1.27, consider disabling the lib.merge...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57085

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution vulnerability exists in the lib.merge function of cli-util v1.1.27 . Attackers can exploit this flaw by supplying a crafted payload to trigger a Denial of Service (DoS) . As a temporary workaround, it is recommended to disable the lib.merge function or restrict access to it ...

CVE-2024-57085: Uncontrolled Resource Consumption

A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

cli-util 安全漏洞

cli-util is a utility function of the cli toolkit open source by cli-kit. A security vulnerability exists in cli-util version v1.1.27, which stems from the lib.merge function containing a prototype contamination vulnerability...