EUVD-2024-1611

Malicious code in bioql PyPI...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

Prototype Pollution

@blackprint/engine is vulnerable to Prototype Pollution. The vulnerability is due to missing object type checks in the DeepProperty function in engine.min.js, which allows an attacker to execute arbitrary code...

GHSA-G3Q2-VCJQ-RGRC Blackprint @blackprint/engine Prototype Pollution issue

A Prototype Pollution issue in Blackprint @blackprint/engine 0.8.12 through 0.9.1 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

Blackprint @blackprint/engine Prototype Pollution issue

A Prototype Pollution issue in Blackprint @blackprint/engine 0.8.12 through 0.9.1 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-24294

Summary: CVE-2024-24294 affects Blackprint @blackprint/engine, notably versions 0.8.12 through 0.9.1 (documented as v.0.9.0 in CVE records). The issue is a prototype pollution flaw in the _utils.setDeepProperty function in engine.min.js that enables an attacker to execute arbitrary code. Public r...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

Blackprint 安全漏洞

Blackprint is a visual programming interface from Blackprint Open Source. A security vulnerability exists in blackprint version v.0.9.0, which originated from a vulnerability that allows attackers to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...