Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2024/07/01 3:32 p.m.•23 views

@cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS8.4AI score0.00419EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/07/01 3:32 p.m.•73 views

GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.8AI score0.00419EPSS
SaveExploits0References3
NVD
NVD
•added 2024/07/01 1:15 p.m.•47 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS0.00419EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•2 views

CVE-2024-39018: Improperly Controlled Modification of Object Prototype Attributes

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.3CVSS6.5AI score0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•20 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00419EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•50 views

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00419EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•63 views

CVE-2024-39018

The harvey-woo cat5th/key-serializer library, specifically version v0.2.5 , contains a prototype pollution vulnerability. The root cause is identified in functions such as query , set , default.query , and default.set , where passing crafted arguments with the proto property allows an attacker to...

6.3CVSS8.3AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder