EUVD-2024-53521

Malicious code in bioql PyPI...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5772 · Cli-Util · Cli-Util

Name of the Vulnerable Software and Affected Versions: cli-util version 1.1.27 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 1.1.27, consider disabling the lib.merge...

CVE-2024-57078

The cli-util utility (version v1.1.27 ), part of the cli-kit toolkit, contains a prototype pollution vulnerability in the lib.merge function. An attacker can exploit this by supplying a crafted payload to cause a Denial of Service (DoS) . As a temporary workaround, it is recommended to disable th...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@aorticweb/truffle-plugin-gobind (1.0.1), @atlantiswap/smart-order-router (>=0.0.2, <=0.0.6) +159 more potentially affected by CVE-2024-57078 via cli-util (>=1.0.9, <=1.1.27)

cli-util NPM version =1.0.9, =0.0.2, =2.2.0, =0.5.31, =0.0.1, =0.0.2, =0.1.0, =0.6.8, =0.0.3, =1.0.0, =0.1.7, =0.6.1, =0.5.20, =2.5.9, =1.0.5, =1.0.7 and more Source cves: CVE-2024-57078 Source advisory: MEND:CVE-2024-57078...

CVE-2024-57078

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57078: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

cli-util security vulnerability

cli-util is a utility function of the cli toolkit open source by cli-kit. A security vulnerability exists in cli-util version v1.1.27, which stems from the lib.merge function containing a prototype contamination vulnerability...