c3 utils security vulnerability

c3 utils is an open source utility library by che3vinci. A security vulnerability exists in c3 utils version 1.0.131, which originates from the inclusion of prototype contamination via the function assign, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injectin...

AofL JS Security Vulnerability

AofL JS is a framework open-sourced by AgeOfLearning. A security vulnerability exists in AofL JS version v3.14.0, which stems from inclusion of prototype contamination via the component defaultsDeep, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting...

2o3t-Utility Security Vulnerabilities

2o3t-Utility is a simple Node.js basic tool library open-sourced by 2o3t. A security vulnerability exists in version v0.1.2 of 2o3t-Utility, which stems from inclusion of prototype contamination via the function extend, allowing an attacker to execute arbitrary code or cause a denial of service D...

amoy common Security Vulnerabilities

amoy common is an amoyjs open source library. A security vulnerability exists in amoy common v1.0.10, which stems from a prototype contamination via the function extend that allows an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary attributes...

AG Grid Security Breach

AG Grid is a full-featured, highly customizable JavaScript data grid from AG Grid Open Source. A security vulnerability exists in AG Grid version v31.3.2, which stems from the inclusion of prototype contamination via the mergeDeep function, allowing an attacker to execute arbitrary code or cause ...

RequireJS Security Vulnerability

RequireJS is an open source library for RequireJS. It is used to load common JavaScript files as well as more defined modules. A security vulnerability exists in RequireJS version v2.3.6, which originates from the inclusion of prototype contamination via the function s.contexts..configure, allowi...

jsonic Security Vulnerabilities

jsonic is a JSON parser for Node.js open-sourced by jsonicjs. A security vulnerability exists in jsonic version v2.12.1, which stems from inclusion of prototype contamination via the function empty, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting...

Fast Loops Security Vulnerability

Fast Loops is a collection of small, high-performance and immutable iterative utilities for arrays and objects from the individual developer Robin Weser. A security vulnerability exists in Fast Loops v1.1.3, which stems from the inclusion of prototype contamination via the function objectMergeDee...

update Security Vulnerabilities

update is a library from Aaron's personal developer. A security vulnerability exists in update version 1.0.0, which originates from easy prototype contamination via update/index.js...

Object Resolver Security Vulnerability

Object Resolver is a general-purpose feature by Samuel Akopyan Personal Developer. It is used to handle nested attributes in JavaScript objects of unlimited depth. A security vulnerability exists in Object Resolver versions prior to 3.1.1, which stems from allowing an attacker to cause prototype...

object-deep-assign security vulnerability

object-deep-assign is a library by Alex Binary Personal Developer. A security vulnerability exists in object-deep-assign version 1.0.11, which stems from easy prototype contamination via extend in Module.deepAssign /src/index.js...

The vulnerability of the nestTables configuration in the mysql2 database library allows a attacker to execute a “ prototype contamination ” attack.

The vulnerability of the nestTables configuration in the mysql2 database library is related to improperly controlled modifications of prototype object attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype compromise” attack...

MySQL2 安全漏洞

MySQL2 is a MySQL client for Node.js by the individual developer Andrey Sidorov. A security vulnerability exists in MySQL2 versions prior to 3.9.8 that stems from a prototype contamination vulnerability due to improper sanitization of input passed to fields and tables when using nestTables...

njwt 安全漏洞

njwt is the cleanest JSON Web Token JWT library for Node.js developers. A security vulnerability exists in njwt version v0.4.0 and earlier, which stems from the inclusion of a prototype contamination vulnerability found in the Parser.prototype.parse method...

FreeScout 安全漏洞

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A security vulnerability exists in FreeScout versions prior to 1.8.139 that stems from the presence of prototype contamination...

kurwov vulnerable to Denial of Service due to improper data sanitization

Summary An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. Details...

GHSA-HFRV-H3Q8-9JPR kurwov vulnerable to Denial of Service due to improper data sanitization

Summary An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. Details...

CVE-2024-34075 kurwov vulnerable to Denial of Service due to improper data sanitization

kurwov is a fast, dependency-free library for creating Markov Chains. An unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose allows a maliciously crafted string on the dataset to throw and stop the function from running properly. If a...

PT-2024-25686 · Kurwov · Kurwov

Name of the Vulnerable Software and Affected Versions: kurwov versions prior to 3.2.5 Description: The issue arises from an unsafe sanitization of dataset contents on the MarkovDatagetNext method used in Markovgenerate and Markovchoose. This allows a maliciously crafted string on the dataset to...

Conform 安全漏洞

Conform is a type-safe form validation library from the Edmund Hung Personal Developer. A security vulnerability exists in Conform 1.1.0 and earlier versions, which stems from allowing an attacker to trigger prototype contamination by passing specially crafted input to parseWith...