PT-2022-29508

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.17.1 Description A bug in the bpf decl tag when tagging a function has been identified. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

Undefsafe has an unspecified vulnerability

Undefsafe is a function that supports setting values. A security vulnerability exists in versions of Undefsafe prior to 2.0.3. An attacker can exploit the vulnerability to add or modify Object.prototype properties with the help of the 'a' function...

CVE-2019-10795

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

CVE-2019-10794

All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

CVE-2019-10795: Improper Neutralization of Special Elements in Output Used by a Downstream Component

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

PT-2020-9146

Name of the Vulnerable Software and Affected Versions undefsafe versions prior to 2.0.3 Description The issue allows the a function to be tricked into adding or modifying properties of Object.prototype using a proto payload, which is a type of Prototype Pollution. This occurs because the function...

PT-2020-9145

Name of the Vulnerable Software and Affected Versions component-flatten versions all Description The issue allows the a function to be tricked into adding or modifying properties of Object.prototype using a proto payload, which is a form of Prototype Pollution. This occurs because the function do...