Prototype Pollution

Axios is vulnerable to prototype pollution. The vulnerability is due to nested request option objects being read without validating own properties, which allows an attacker to exploit pre-existing Object.prototype pollution to inject inherited authentication values or alter query-string...

Timing Attack

com.ongres.scram:scram-common is vulnerable to Timing Attack. The vulnerability is due to the use of Arrays.equals for comparing sensitive authentication values, which performs short-circuit evaluations and causes variable execution times, allowing an attacker to exploit timing differences to inf...