CVE-2025-57107

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

CVE-2025-57106

CVE-2025-57106 affects Kitware VTK up to 9.5.0, where a buffer overflow can occur in vtkGLTFDocumentLoader during GLTF accessor data processing in the BufferDataExtractionWorker template function. Red Hat and ENISA EUVD entries corroborate the same root cause and impact (buffer overflow). The CVE...

CVE-2025-57107

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

CVE-2025-57107

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

Kitware VTK 安全漏洞

Kitware VTK is a 3D image generation software from Kitware open source. A security vulnerability exists in Kitware VTK 9.5.0 and earlier versions, which stems from a heap buffer overflow that can be caused by the copy constructor of the Accessor object not properly validating buffer boundaries wh...

CVE-2025-57107

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap buffer overflow vulnerability in vtkGLTFDocumentLoader. When processing specially crafted GLTF files, the copy constructor of Accessor objects fails to properly validate buffer boundaries before performing memory read operations...

CVE-2024-36583

A Prototype Pollution issue in byondreal accessor = 1.0.0 allows an attacker to execute arbitrary code via @byondreal/accessor/index...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

GO-2024-3113 Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault

Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault...

Vault Leaks Client Token and Token Accessor in Audit Devices

Summary Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

byondreal accessor security breach

byondreal accessor is a library by byondreal individual developers. A security vulnerability exists in byondreal accessor version 1.0.0 and earlier, which originates from a vulnerability that allows an attacker to execute arbitrary code via byondreal/accessor/index...

PT-2024-27082 · Unknown · Byondreal Accessor

Name of the Vulnerable Software and Affected Versions: byondreal accessor version 1.0.0 and earlier Description: A Prototype Pollution issue allows an attacker to execute arbitrary code. The issue is related to the @byondreal/accessor/index module. Recommendations: For byondreal accessor version...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

npm getsetprop Security Vulnerabilities

npm getsetprop is a library from the American company npm. A security vulnerability exists in npm getsetprop version 1.1.0, which originated from allowing an attacker to execute arbitrary code via global.accessor...

CVE-2024-36583

A Prototype Pollution issue in byondreal accessor = 1.0.0 allows an attacker to execute arbitrary code via @byondreal/accessor/index...

CVE-2024-36575

CVE-2024-36575 affects getsetprop 1.1.0, with a prototype pollution flaw that can allow an attacker to execute arbitrary code via global.accessor. NVD/NVD-related entries cite code execution, while Veracode notes pollution via proto /constructor.prototype that could disrupt logic and lead to remo...

PT-2024-27075 · Unknown · Getsetprop

Name of the Vulnerable Software and Affected Versions: getsetprop version 1.1.0 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via global.accessor. Recommendations: For getsetprop version 1.1.0, consider disabling access to the global.accessor until a patch ...

CVE-2024-36583

A Prototype Pollution issue in byondreal accessor = 1.0.0 allows an attacker to execute arbitrary code via @byondreal/accessor/index...

CVE-2024-36583

The CVE-2024-36583 entry describes a Prototype Pollution vulnerability in the byondreal accessor package, affecting version 1.0.0 and earlier. The issue arises from improper key handling in @byondreal/accessor/index that can allow an attacker to modify object prototypes and potentially execute ar...