GHSA-7PRF-VW4P-QR59 Prototype pollution in supermixer

Prototype pollution in Stampit supermixer allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation...

Prototype pollution in supermixer

Prototype pollution in Stampit supermixer allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation...

CVE-2020-24939

Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation...

CVE-2020-24939

Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation...

Information disclosure

Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation...

Stampit supermixer 安全漏洞

Stampit supermixer is an nmp package for individual developers to mix/merge/extend objects in multiple ways. A security vulnerability exists in Stampit supermixer version 1.0.3, which can be exploited by an attacker to modify the prototype of a base object...

PT-2021-11090 · Stampit · Stampit

Name of the Vulnerable Software and Affected Versions: Stampit supermixer version 1.0.3 Description: The issue allows an attacker to modify the prototype of a base object, which can vary in severity depending on the implementation. Recommendations: For version 1.0.3, at the moment, there is no...

Js-data Security Vulnerabilities

Js-data is Js-data Js-data team of a Javascript-based ORM framework for interacting with multiple data sources . The software supports Firebase, MySql, RethinkDB, MongoDB, localStorage, Redis and other data sources. A security vulnerability exists in all versions of js-data, which stems from the...

CVE-2020-26237

A flaw was found in nodejs-highlight-js. Highlight.js is vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting...

Code injection

Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting. If you allow use...

security flaw

Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object...