3944 matches found
Quasar: Prototype pollution in the extend() utility
Summary [email protected], the latest published version at the time of testing, appears to be vulnerable to prototype pollution through the public extend utility exported from the package root. When extendtrue, target, source is used for a deep merge, attacker-controlled object keys are recursively...
Prototype Pollution
Overview mongoose is a Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Affected versions of this package are vulnerable to Prototype Pollution in the schema path getter Schema.getSchema during update casting, which follows a proto-prefixed dotted path...
Prototype Pollution
Overview @sveltejs/kit is a SvelteKit framework and CLI Affected versions of this package are vulnerable to Prototype Pollution in the file input deletion path in remote-function forms when arbitrary user-controlled path names are accepted for input fields of type file. An attacker can remove...
Prototype Pollution
Overview Affected versions of this package are vulnerable to Prototype Pollution in the lookup function when handling HTTP/2 requests. An attacker can cause the application to crash by sending specially crafted HTTP method values that exploit inherited object properties, leading to a denial of...
The vulnerability of the jv_object_merge_recursive() function in the jq JSON processing tool allows a attacker to cause a service failure.
The vulnerability of the jvobjectmergerecursive function in the jq JSON processing tool is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...
Prototype Pollution
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Prototype Pollution via the Edit Fields Set process when output fields are assigned using dot-notation path setters without restricting field names. An attacker can corrupt a shared global in the ma...
GHSA-WRF9-R3H7-7X5V Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
Summary The POST /api/v1/repos/owner/repo/merge-upstream endpoint continues to synchronize commits from a parent repository after the parent repository has been changed from public to private. A fork created while the parent repository was public can still receive commits made after the parent...
Gitea: Fork Synchronization Continues After Parent Repository Changes from Public to Private
Summary The POST /api/v1/repos/owner/repo/merge-upstream endpoint continues to synchronize commits from a parent repository after the parent repository has been changed from public to private. A fork created while the parent repository was public can still receive commits made after the parent...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through changing a pull request's target branch without re-evaluating the official approval status on existing reviews. An attacker can bypass branch protection requirements and merge code into protected branches...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through changing a pull request's target branch without re-evaluating the official approval status on existing reviews. An attacker can bypass branch protection requirements and merge code into protected branches...
EUVD-2026-42315
Immutabl: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set...
SUSE CVE-2026-64174
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211mergeprofile cfg80211mergeprofile reassembles a Multi-BSSID non-transmitted BSS profile that has been split across multiple consecutive MBSSID elements. Its while-loop calls...
PT-2026-63305
Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.27.0 Description Gitea fails to re-evaluate the official flag on existing pull request reviews when the target branch of a pull request is changed. An attacker with write access to a repository can obtain an official:...
GHSA-GCFJ-64VW-6MP9 Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
Summary Axios’ Node.js HTTP adapter can route requests through an attacker-controlled proxy when Object.prototype.proxy is polluted and request configuration is materialized as a regular object before dispatch. Recent axios releases harden merged request config by creating a null-prototype object...
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
NPM: js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml vulnerability discovered by ? in WordPress Npm js-yaml versions = 5.0.0, = 5.1.0...
GHSA-G796-FGMG-93MV js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
Impact This is the same report as for v3/v4, but with lower severity, because in v5, merge is off by default When merge keys 1s doc size 100K js import performance from 'node:perfhooks' import Buffer from 'node:buffer' import load, YAML11SCHEMA from 'js-yaml' const n = Numberprocess.argv2 || 4000...
EUVD-2026-42302
js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml...
js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
Impact This is the same report as for v3/v4, but with lower severity, because in v5, merge is off by default When merge keys 1s doc size 100K js import performance from 'node:perfhooks' import Buffer from 'node:buffer' import load, YAML11SCHEMA from 'js-yaml' const n = Numberprocess.argv2 || 4000...
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Impact js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly. The issue is triggered by a chain of mappings where each mapping merges the previous one: yaml a0: &a0 k0: 0 a1: &a1 1s doc size 100K js import performance from 'node:perfhooks' import Buffer from...