PT-2024-27073 · Almela · Obx

Name of the Vulnerable Software and Affected Versions: almela obx versions prior to 0.0.4 Description: The issue allows arbitrary code execution via the obx/build/index.js component, specifically through the reduce function at @almela/obx/build/index.js:470 and Object.set at obx/build/index.js:26...

CVE-2024-36573

CVE-2024-36573 affects the JavaScript library almela/obx up to version 0.0.3 (prior to 0.0.4). The vulnerability is described as a Prototype Pollution flaw originating from the index.js component, specifically the reduce function and Object.set usage in obx/build/index.js, which could allow arbit...