Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:7 a.m.1 views

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

5.9CVSS6.2AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2024/07/01 3:32 p.m.5 views

GHSA-GH4X-QV3P-M9PM akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00283EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.13 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00283EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/07/01 1:15 p.m.7 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS0.00283EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.10 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00283EPSS
Exploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2024/07/01 12:0 a.m.12 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS8.2AI score0.00283EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2024/07/01 12:0 a.m.40 views

CVE-2024-38991

CVE-2024-38991 affects the npm library akbr patch-into, version 1.0.1 . The root cause is a prototype pollution flaw in the function patchInto , which can allow an attacker to inject arbitrary properties. This leads to potential remote arbitrary code execution or Denial of Service (DoS) as descri...

8.8CVSS8.3AI score0.00283EPSS
Exploits0References1
OSV
OSV
added 2024/06/17 6:31 p.m.10 views

GHSA-MJ4P-GMHR-92G3 @akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

5.9CVSS5.6AI score0.00061EPSS
Exploits0References3
NVD
NVD
added 2024/06/17 4:15 p.m.14 views

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

5.9CVSS0.00061EPSS
Exploits0References1
CVE
CVE
added 2024/06/17 12:0 a.m.43 views

CVE-2024-36578

CVE-2024-36578 affects the npm package akbr/update, version 1.0.0, via Prototype Pollution in the file update/index.js . The connected sources describe an impact where manipulating an object’s prototype could alter application behavior and potentially allow arbitrary code execution. No explicit p...

5.9CVSS7AI score0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/17 12:0 a.m.13 views

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

0.00061EPSS
Exploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2024/06/17 12:0 a.m.14 views

@akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

5.9CVSS6.7AI score0.00061EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/17 12:0 a.m.16 views

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

6.5AI score0.00061EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/17 12:0 a.m.2 views

PT-2024-27077 · Unknown · Akbr Update

Name of the Vulnerable Software and Affected Versions: akbr update version 1.0.0 Description: The issue is related to Prototype Pollution, which occurs via the update/index.js file. Recommendations: For akbr update version 1.0.0, consider restricting access to the update/index.js file as a...

5.9CVSS6.8AI score0.00061EPSS
Exploits0References4
Rows per page
Query Builder