3952 matches found
Code injection
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
CVE-2021-3645
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
CVE-2021-3645 Prototype Pollution in viking04/merge
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
CVE-2021-3645
CVE-2021-3645 concerns the npm package viking04/merge , described across connected documents as vulnerable to Prototype Pollution : Improperly Controlled Modification of Object Prototype Attributes. The Red Hat, Veracode, and OSV entries all reiterate the same issue, highlighting that an attacker...
PT-2021-21271
Name of the Vulnerable Software and Affected Versions merge affected versions not specified Description The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This problem allows for the modification of object prototype...
Github merge 安全漏洞
Github merge is a simple npm package that merges many sources into a target. merge suffers from a security vulnerability that can be exploited by an attacker for remote code execution...
CVE-2021-3645: Improperly Controlled Modification of Object Prototype Attributes
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...
DEBIAN-CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
AZL-6758 CVE-2021-39253 affecting package ntfs-3g for versions less than 2021.8.22-1
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
UBUNTU-CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
CVE-2021-39253
A crafted NTFS image can cause an out-of-bounds read in ntfsrunlistsmergei in NTFS-3G 2021.8.22...
@cookiex/class-state (>=0.0.1, <=0.0.2), @cookiex/cli (>=0.2.10, <=0.2.11-0) +3 more potentially affected by CVE-2021-23442 via @cookiex/deep (>=0.0.1, <=0.0.6)
@cookiex/deep NPM version =0.0.1, =0.0.1, =0.2.10, =0.0.0-0.1, =0.1.2, =0.1.3 Source cves: CVE-2021-23442 Source advisory: SNYK:JS-COOKIEXDEEP-1582793...
Prototype Pollution
Overview @cookiex/deep is a Tool to assign properties recursively and create recursion features in an easy way. Affected versions of this package are vulnerable to Prototype Pollution. The global proto object can be polluted using the proto object. PoC var deep = require"@cookiex/deep" const targ...
Prototype Pollution in Proto
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
GHSA-58G2-9FQR-36Q2 Prototype Pollution in Proto
This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function...
Prototype Pollution
Proto is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the merge function...
Prototype Pollution in merge-change
All current versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function...
@breautek/storm (>=2.0.0-rc.0, <=3.0.0-rc.0), create-react-solution (>=1.2.0, <=4.4.1) +2 more potentially affected by CVE-2021-23421 via merge-change (>=1.5.3, <=1.8.1)
merge-change NPM version =1.5.3, =2.0.0-rc.0, =1.2.0, =1.5.0, =4.0.0, =4.4.1 Source cves: CVE-2021-23421 Source advisory: OSV:GHSA-F9CV-665R-275H...
