Lucene search
K

4 matches found

OSV
OSV
added 2024/12/18 6:30 a.m.0 views

GHSA-V9MX-4PQQ-H232 Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

Versions of the package bun before 1.1.30 are vulnerable to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects...

7.7CVSS5.9AI score0.00205EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.2 views

PT-2024-18959 · Bun · Bun

Name of the Vulnerable Software and Affected Versions: bun versions prior to 1.1.30 Description: The issue is related to Prototype Pollution due to improper input sanitization. An attacker can exploit this vulnerability through Bun's APIs that accept objects. Recommendations: For versions prior t...

7.7CVSS7.2AI score0.00205EPSS
Exploits0References12
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

Bun 安全漏洞

Bun is a Bun open source all-in-one toolkit for JavaScript and TypeScript applications. A security vulnerability exists in versions of Bun prior to 1.1.30, which stems from improper input cleanup and susceptibility to prototype contamination...

7.7CVSS6.4AI score0.00205EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/04 12:0 a.m.4 views

ViewVC 跨站脚本漏洞

ViewVC is a web-based tool for browsing CVS and SVN code repositories. A security vulnerability exists in ViewVC versions prior to 1.2.3 and 1.1.30, which originates from a cross-site scripting vulnerability that can be exploited by an attacker to cause the browser to run the specified code by...

5.4CVSS5.4AI score0.00612EPSS
Exploits1References6
Rows per page
Query Builder