CVE-2024-27935

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vulnerability in Deno's Node.js compatibility runtime allows for cross-session data contamination during simultaneous asynchronous reads from Node.js streams sourced from sockets o...

cli-util 安全漏洞

cli-util is a utility function of the cli toolkit open source by cli-kit. A security vulnerability exists in cli-util version v1.1.27, which stems from the lib.merge function containing a prototype contamination vulnerability...

PHP Parser 安全漏洞

PHP Parser is a PHP parser written in PHP by Nikita Popov, a personal developer. A security vulnerability exists in PHP Parser version v3.2.1, which stems from the lib.combine function containing a prototype contamination vulnerability...

node-opcua 安全漏洞

node-opcua is a French Sterfive SAS open source implementation of an OPC UA stack written entirely in Typescript for NodeJS. A security vulnerability exists in node-opcua version v2.134.0, which stems from the fieldsToJson function containing a prototype contamination vulnerability...

Zag 安全漏洞

Zag is a framework open-sourced by Chakra. A security vulnerability exists in Zag version v0.50.0, which stems from the lib.deepMerge function containing a prototype contamination vulnerability...

eazy-logger 安全漏洞

eazy-logger is a simple cli logger by Shane Osbourne Personal Developer. A security vulnerability exists in eazy-logger version v4.0.1, which stems from the lib.Logger function containing a prototype contamination vulnerability...

dot-querystring 安全漏洞

dot-querystring is a dot notation library for node query strings by the individual developer Naoya Tsutsumi. A security vulnerability exists in dot-querystring version v0.2.0, which stems from the lib.parse function containing a prototype contamination vulnerability...

vxe-table 安全漏洞

vxe-table is a vue-based PC-side form/table component from XE open source. A security vulnerability exists in vxe-table version v4.8.10, which stems from the lib.install function containing a prototype contamination vulnerability...

dot-properties 安全漏洞

dot-properties is a library for parsing and stringifying .properties files in JavaScript by the individual developer Eemeli Aro. A security vulnerability exists in dot-properties version v1.0.1, which stems from the lib.parse function containing a prototype contamination vulnerability...

ajax-request 安全漏洞

ajax-request is a nodejs HTTP request by nothing personal developer. A security vulnerability exists in ajax-request v1.2.3, which stems from the lib.post function containing a prototype contamination vulnerability...

Utile 安全漏洞

Utile is an application from Utile, Inc. A security vulnerability exists in Utile version v0.3.0, which stems from the lib.createPath function containing a prototype contamination vulnerability...

Syncfusion ej2-spreadsheet 安全漏洞

Syncfusion ej2-spreadsheet is a spreadsheet control from Syncfusion. A security vulnerability exists in Syncfusion ej2-spreadsheet version v27.2.2, which stems from the lib.setValue function containing a prototype contamination vulnerability...

xe-utils 安全漏洞

xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...

underscore-contrib 安全漏洞

underscore-contrib is an open source application from DocumentCloud. A security vulnerability exists in underscore-contrib version v0.3.0, which stems from the lib.fromQuery function containing a prototype contamination vulnerability...

module-from-string 安全漏洞

module-from-string is a library by the individual developer Xuanbo Cheng. A security vulnerability exists in module-from-string version v3.3.1, which stems from a prototype contamination vulnerability in the lib.requireFromString function...

expand-object 安全漏洞

expand-object is a library by Jon Schlinkert, a personal developer, that uses simple symbols to expand strings into JavaScript objects. A security vulnerability exists in expand-object version v0.4.2, which stems from the lib function containing a prototype contamination vulnerability...

utils-extend 安全漏洞

utils-extend is an extension by nothing individual developer. A security vulnerability exists in utils-extend, which stems from the lib.extend function containing a prototype contamination vulnerability...

defaults 安全漏洞

defaults is a library by the individual developer Nathan Houle. When the value of an enumerable property owned on a source object is undefined, copying that property from the source object to the target object A security vulnerability exists in defaults version v2.0.1, which stems from the lib.de...

StrykerJS 安全漏洞

StrykerJS is a JavaScript library open-sourced by Stryker Mutator. A security vulnerability exists in StrykerJS version v8.6.0, which stems from the deepMerge function containing a prototype contamination vulnerability...

react-uploady 安全漏洞

react-uploady is an upload component of rpldy open source. A security vulnerability exists in react-uploady v1.8.1, which stems from the lib.createUploader function containing a prototype contamination vulnerability...