Prototype Pollution

utilities is vulnerable to Prototype Pollution. The vulnerability exists in the mix function of utilities/lib/core.js when the object is merged, which allows an attacker to cause prototype pollution...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

loader-utils: Regular expression denial of service

A flaw was found in loader-utils webpack library. When the url variable from interpolateName is set, the prototype can be polluted. This issue could lead to a regular expression Denial of Service ReDoS, affecting the availability of the affected component...

10.13zy1 (1.0.0), @luminati-io/jake (>=8.0.10-lum.0, <=8.0.10-lum.2) +43 more potentially affected by CVE-2023-26105 via utilities (>=1.0.4, <=1.0.6)

utilities NPM version =1.0.4, =8.0.10-lum.0, =8.0.19-sync, =2.1.0, =0.0.1-preview.3, =1.0.0, =0.0.1, =1.0.70, =0.0.1, =1.0.0, =1.0.39 and more Source cves: CVE-2023-26105 Source advisory: OSV:GHSA-WXFJ-84XF-7GXV...

mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

GHSA-WXFJ-84XF-7GXV mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

CVE-2023-26105 affects all versions of the mde utilities package. The root cause is a vulnerability in the _mix function used during object merging, enabling prototype pollution with high impact (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Multiple advisories and records (NVD, Red Hat, ...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

PT-2023-20492

Name of the Vulnerable Software and Affected Versions utilities affected versions not specified Description The issue concerns Prototype Pollution via the mix function. This affects all versions of the package utilities. There is no information provided about the estimated number of potentially...

mde utilities 安全漏洞

mde utilities is a classic collection of JavaScript utilities. A security vulnerability exists in mde utilities that stems from the presence of a prototype contamination vulnerability...

Siemens JT Open Toolkit 安全漏洞

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. A security vulnerability exists in Siemens JT Open Toolkit, JT Utilities, and Parasolid, which...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a privilege bypass in resolveAttributionSource of ServiceUtilities.cpp, which can be exploited by an attacker to gain elevated...

CVE-2023-26105: Improperly Controlled Modification of Object Prototype Attributes

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

K35040315: glibc vulnerability CVE-2016-10739

Security Advisory Description In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a...

Malicious Package

Overview @realty-front/webpack-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...