EUVD-2023-1589

Malicious code in bioql PyPI...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Prototype Pollution

@antfu/utils is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the deepMerge function of object.js which allows an attacker to inject and modify malicious properties such as proto, resulting in prototype pollution...

128981semzub (=1.0.1), 2ra-ui (>=0.0.0 <=1.3.0) +2842 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7 <=0.7.2)

@antfu/utils NPM version =0.1.7, =0.0.0, =0.1.5, =0.1.0, =0.0.2, =1.0.0-beta.0, =1.0.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.3-alpha.2, =0.0.1-alpha.4, =1.1.60, =1.1.0, =1.3.21 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Code injection

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

PT-2023-22371 · Unknown · Antfu/Utils

Name of the Vulnerable Software and Affected Versions: antfu/utils versions prior to 0.7.3 Description: The issue is related to Prototype Pollution in the GitHub repository antfu/utils. Recommendations: For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

CVE-2023-2972 describes a prototype pollution vulnerability in the GitHub repository antfu/utils prior to 0.7.3. The issue is confirmed across multiple sources (NVD/OSV/GHSA) as a prototype contamination in the utility’s codebase. Reported impact in the CVE data indicates high-level risk, but the...