EUVD-2022-1753

Malicious code in bioql PyPI...

EUVD-2022-1843

Malicious code in bioql PyPI...

CVE-2022-1295

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2...

CVE-2022-1330 stored xss due to unsantized anchor url in alvarotrigo/fullpage.js

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...

CVE-2022-1295 Prototype Pollution in alvarotrigo/fullpage.js

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2...

CVE-2022-1295

Prototype Pollution in fullpage.js (CVE-2022-1295) affects the library prior to 4.0.2, via the internal deepExtend utility (window.fp_utils) enabling pollution of Object prototypes. Multiple sources (GHSA, OSV, NVD/nvd, Red Hat, Huntr) confirm the issue and describe the impact as potentially enab...