CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

GHSA-GH4X-QV3P-M9PM akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

The akbr patch-into library, specifically version v1.0.1 , contains a prototype pollution vulnerability within the patchInto function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . No specific remediatio...

PT-2024-28307

Name of the Vulnerable Software and Affected Versions akbr patch-into version 1.0.1 Description The issue is related to a prototype pollution via the function patchInto. This allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary properties...

CVE-2024-38991: Improperly Controlled Modification of Object Prototype Attributes

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

GHSA-MJ4P-GMHR-92G3 @akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578: Improperly Controlled Modification of Object Prototype Attributes

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

@akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

PT-2024-27077 · Unknown · Akbr Update

Name of the Vulnerable Software and Affected Versions: akbr update version 1.0.0 Description: The issue is related to Prototype Pollution, which occurs via the update/index.js file. Recommendations: For akbr update version 1.0.0, consider restricting access to the update/index.js file as a...

CVE-2024-36578

The @akbr/update library (version 1.0.0 ) is vulnerable to Prototype Pollution due to improper handling in the update/index.js file. An attacker could manipulate the object prototype, potentially allowing them to alter application behavior or execute arbitrary code. As a temporary mitigation, it ...