Node WHOIS 安全漏洞

Node WHOIS is an open source WHOIS client for Node.js by Furqan Software. Node WHOIS has a security vulnerability that stems from a problem with an unknown function in the file index.coffee, which can lead to improperly controlled modifications of object prototype properties, resulting in prototy...

chbrown rfc6902 安全漏洞

rfc6902 is an implementation of rfc6902 in TypeScript by the individual developer Christopher Brown. A security vulnerability exists in chbrown rfc6902, which stems from the fact that incorrect operation can lead to prototype contamination...

Silverstripe framework cross-site scripting vulnerability

Silverstripe framework is an application from Silverstripe New Zealand. Empowering powerful digital teams by creating a platform for digital change. silverstripe framework 4.10.0 and previous versions contain a cross-site scripting vulnerability that stems from the use of jQuery 1.7.2, which is...

Parse Server 安全漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 4.10.20 or 5.3.3, which stems from an attacker's ability to prototype contamination via a cloud code web hook...

Parse Server 安全漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 4.10.19 or 5.3.2, which stems from an attacker's ability to contaminate prototypes via cloud code web hooks or cloud code...

CVE-2021-26393

Insufficient memory cleanup in the AMD Secure Processor ASP Trusted Execution Environment TEE may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of...

Prototype Pollution

fastest-json-copy is vulnerable to pollution prototype. The vulnerability exists because of missing validation of keys in v1.js allowing an attacker to add new values to the JavaScript object prototype, overwriting or contaminating the base object...

browserify-shim 品安全漏洞

browserify-shim is the thlorenz personal developer's tool for making CommonJS-incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which originates from a prototype chain contamination that can be caused by an attacker via the shimPath variable in the...

browserify-shim 安全漏洞

browserify-shim is used by thlorenz individual developers to make CommonJS incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which stems from a prototype contamination vulnerability in the resolveShims function in resolve-shims.js...

Winter 安全漏洞

Winter is a free, open source, self-hosted CMS platform based on the Laravel PHP framework. A security vulnerability exists in Winter versions 1.1.8, 1.1.9, and 1.2.0, which stems from the Snowboard framework's susceptibility to prototype contamination in Snowboard's main class and its plugin...

UglifyJS 安全漏洞

UglifyJS is a JavaScript parser, compressor, cruncher and beautification toolkit for mishoo individual developers. A security vulnerability exists in UglifyJS version 3.13.2, which stems from the susceptibility of ast.js' DEFNODE function to prototype contamination...

grunt-karma 安全漏洞

grunt-karma is a grunt plugin for Karma by karma-runner individual developers. A security vulnerability exists in karma-runner grunt-karma version 4.0.1, which stems from a prototype contamination vulnerability via the key variable in grunt-karma.js...

Prototype Pollution

xmldom is vulnerable to prototype pollution. The vulnerability exists because of lack of validations in copy function in dom.js which allows an attacker to inject malicious characteristics to add new values to a javascript application object prototype,overwriting or contaminating the base object...

Mockery 安全漏洞

Mockery is the mfncooper personal developer's way of providing an easy-to-use API that can be used to hook up mocking without having to mess with the require cache or other Node implementation details. A security vulnerability exists in mfncooper Mockery version 2.1.0, which stems from a prototyp...

gh-pages 安全漏洞

gh-pages is a general-purpose task for Tim Schaub's personal developer to publish files to the gh-pages branch on GitHub. A security vulnerability exists in gh-pages version 3.1.0, which stems from a prototype contamination vulnerability via some variables in util.js...

loader-utils 安全漏洞

loader-utils is a webpack open source utility for the webpack loader. A security vulnerability exists in webpack loader-utils version 2.0.0, which stems from the discovery of a prototype contamination vulnerability contained in the parseQuerys function of parseQuery.js...

XMLDOM 安全漏洞

XMLDOM is a JavaScript implementation of the W3C DOM for Node by the individual developer jindw. A security vulnerability exists in XMLDOM versions prior to 0.8.3, which stems from the discovery that the p variable of the copy function of the dom.js of the XMLDOM package contains a prototype...

js-beautify 安全漏洞

js-beautify is beautify-web open source a javascript beautifier . A security vulnerability exists in beautify-web js-beautify version 1.13.7, which stems from the discovery of a contained prototype contamination vulnerability via the name variable in options.js...

browserify-shim 安全漏洞

browserify-shim is used by thlorenz individual developers to make CommonJS incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which stems from a prototype contamination vulnerability found in the resolveShims function...

Express XSS Sanitizer prototype contamination vulnerability

Express XSS Sanitizer is a personal development by AhmedAdelFahim to clean user input data in req.body, req.query, req.headers and req.params to prevent cross-site scripting XSS attacks. express XSS Sanitizer A prototype contamination vulnerability exists in versions prior to 1.1.3, which stems...