tough-cookie 安全漏洞

tough-cookie is an open source library from Salesforce. A security vulnerability exists in tough-cookie versions prior to 4.1.3 that stems from improper handling of cookies when using CookieJar in rejectPublicSuffixes=false mode, which could lead to a prototype contamination vulnerability...

flatnest 安全漏洞

flatnest is a library from the personal developer Bryce Baril. A security vulnerability exists in flatnest that stems from easy prototype contamination via the Nest function in the flatnest/nest.js file...

Parse Server 安全漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 5.5.2 and prior to 6.2.1, which stems from a vulnerability that allows an attacker to trigger remote code execution using a...

dottie 安全漏洞

dottie is an application from Mick Hansen's personal developer that makes it easy to find nested keys. A security vulnerability exists in versions prior to dottie 2.0.4, which stems from inadequate checking and vulnerability to prototype contamination...

utils 安全漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in versions of utils prior to 0.7.3 that stems from the presence of prototype contamination...

aedart ion 安全漏洞

aedart ion is a product from the Danish individual developer Alin Eugen Deac that provides versatile packages. A security vulnerability exists in aedart ion versions prior to 0.6.1, which stems from a possible prototype contamination issue...

Tencent vConsole 安全漏洞

Tencent vConsole is a lightweight, extensible front-end development tool for mobile web from Tencent, China. A security vulnerability exists in Tencent vConsole version 3.15.0, which stems from a prototype contamination issue due to incorrect key and value parsing in setOptions...

SheetJS 安全漏洞

SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.19.3, which stems from a vulnerability that allows an attacker to prototype contamination by crafting files...

safe-eval 安全漏洞

safe-eval is a safer version of the eval function from the Hage Yaapa Personal Developer. safe-eval suffers from a security vulnerability that stems from incorrect parameter cleanup of the safeEval function, leading to prototype contamination...

Collection 安全漏洞

Collection is a minimalist JavaScript library for working with collections of data by the individual developer kobezzza. A security vulnerability exists in Collection versions prior to 6.8.1, which stems from prototype contamination via extension functions in...

dot-lens 安全漏洞

dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...

mde utilities 安全漏洞

mde utilities is a classic collection of JavaScript utilities. A security vulnerability exists in mde utilities that stems from the presence of a prototype contamination vulnerability...

rangy 安全漏洞

rangy is a cross-browser JavaScript selection library. A security vulnerability exists in timdown rangy that stems from the presence of a prototype contamination vulnerability...

Rocket.Chat 安全漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in Rocket.Chat versions prior to 5.2.0, which stems from the presence of a prototype contamination vulnerability that can be exploited by an attacker to perform an RCE under the administrator account...

Visioweb.js 安全漏洞

Visioglobe Visioweb.js is used by Visioglobe to load and explore 3D maps built from VisioMapEditor. A security vulnerability exists in Visioweb.js version 1.10.6, which stems from the presence of prototype contamination that can be exploited by an attacker to execute XSS on a client system...

Json-Pointer 安全漏洞

Json-Pointer is an open source, Rfc 6901 described Json pointer some utility program by the individual developer Manuel Stofer in Switzerland. A security vulnerability exists in Json-Pointer. An attacker could exploit this vulnerability to cause prototype contamination...

JSON-Patch 安全漏洞

JSON-Patch is a streamlined and averaged Javascript implementation of the JSON Patch standard RFC 6902 by the individual developer Joachim Wester. A security vulnerability exists in JSON-Patch versions prior to 3.1.1, which stems from a prototype contamination that can lead to improperly controll...

flat 安全漏洞

flat is a library from Hugh Kennedy's personal developer. It is used to take a nested Javascript object and flatten it, or to unflatten the object using the separator key. A security vulnerability exists in versions prior to flat 5.0.1, which stems from a problem with the unflatten function in th...

Tree Kit 安全漏洞

Tree Kit is a toolkit for Cedric Ronvel's personal developers that provides functions that operate with nested object structures. A security vulnerability exists in Tree Kit versions prior to 0.7.0, which stems from a vulnerability that can lead to improperly controlled modification of an object'...

safe-eval 安全漏洞

safe-eval is a safer version of the eval function from the Hage Yaapa Personal Developer. safe-eval suffers from a security vulnerability that stems from susceptibility to prototype contamination, which allows an attacker to add or modify properties of Object.prototype.Consolidate when using the...