Unspecified vulnerability in ts-nodash

ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...

record-like-deep-assign code issue vulnerability

record-like-deep-assign is a package. A code issue vulnerability exists in record-like-deep-assign that stems from a prototype contamination affecting key functionality within the plugin. No details of the vulnerability are provided at this time...

record-like-deep-assign 代码问题漏洞

record-like-deep-assign is a package. A code issue vulnerability exists in record-like-deep-assign that stems from a prototype contamination affecting key functionality within the plugin. No details of the vulnerability are provided at this time...

Haml Cross-Site Scripting Vulnerability

haml is an open source HTML abstract markup language from the Haml HAML team. A cross-site scripting vulnerability exists in haml-coffee, which supports overriding a range of HTML helper functions through its configuration options. Control of the escapeHtml parameter through template configuratio...

lutils 安全漏洞

lutils is a library of front-end code snippet collection tools. A security vulnerability exists in the lutils package that stems from the vulnerability of main merge functions to prototype contamination...

The vulnerability of the dot-prop library in application software, Aurora Center, arises from uncontrolled changes to object prototypes’ attributes. This allows attackers to execute “prototype pollution” attacks.

The vulnerability of the dot-prop library in application software, Aurora Center, involves uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype contamination” attack...

Npm nestie 安全漏洞

Npm nestie is an Npm open source application for extending the flat object tiny 224B and quick utilities. A security vulnerability exists in nestie that stems from a prototype contamination vulnerability in nestie versions 0.0.0 through 1.0.0. An attacker could exploit the vulnerability to cause ...

haml 跨站脚本漏洞

haml is an open source HTML abstract markup language from the Haml HAML team. A cross-site scripting vulnerability exists in haml-coffee, which supports overriding a range of HTML helper functions through its configuration options. Control of the escapeHtml parameter through template configuratio...

handlebars 安全漏洞

handlebars is a semanticized web template system. A security vulnerability exists in handlebars versions prior to 4.7.7 that stems from vulnerability to prototype contamination when certain compilation options are selected to compile templates from untrusted sources...

Takayuki Sato copy-props 安全漏洞

Takayuki Sato copy-props is Takayuki Sato open source an application system . It is used to deeply copy properties between two objects. A security vulnerability exists in copy-props before 2.0.5, which stems from susceptibility to prototype contamination...

Fishcharlie Amazon Dynamoose Security Breach

Fishcharlie Amazon Dynamoose is a modeling tool from the Fishcharlie organization in the United States. A modeling tool for Amazon DynamoDB is provided. Fishcharlie Amazon Dynamoose has a security vulnerability in versions prior to 2.0.0 and 2.7.0 that stems from a prototype contamination...

total.js Security Vulnerabilities

Total Avengers Totaljs Framework is a Javascript-based codebase for building web, desktop, service or IoT applications from Total Avengers Slovakia. The application is similar to PHPs Laravel, Pythons Django, ASP.NET MVC for building Node applications. A security vulnerability exists in total.js...

Deoxxa Dotty Security Vulnerability

Deoxxa Dotty is a Javascript-based codebase for supporting access to object properties by Deoxxa individual developers. A security vulnerability exists in Deoxxa Dotty versions 0.0.1 through 0.1.0, which stems from a prototype contamination vulnerability that allows an attacker to exploit a denia...

Geta NestedObjectAssign Security Vulnerability

Geta NestedObjectAssign is a Javascript-based codebase for extending the Object.assign function from the Geta team. A security vulnerability exists in Geta NestedObjectAssign before 1.0.4, which stems from susceptibility to prototype contamination of default functions...

Victornpb Asciitable.js Security Vulnerability

Victornpb Asciitable is a Javascript-based codebase for generating Ascii tables from two-digit tables of strings by the individual developer of Victornpb. A security vulnerability exists in asciitable.js before 1.0.3, which stems from the vulnerability to prototype contamination in the main...

Lukeed dset prototype contamination vulnerability

Lukeed Dset is Lukeed individual developers of a Javascript-based language can be based on the dictionary type object assignment code library . A security vulnerability exists in Lukeed dset versions 1.0.0 through 2.0.1, which is a prototype contamination that can be exploited by an attacker to...

Lukeed Dset 安全漏洞

Lukeed Dset is Lukeed individual developers of a Javascript-based language can be based on the dictionary type object assignment code library . A security vulnerability exists in Lukeed dset versions 1.0.0 through 2.0.1, which is a prototype contamination that can be exploited by an attacker to...

Evangelion1204 Multi-ini Resource Management Error Vulnerability

Evangelion1204 Multi-ini is Evangelion1204 individual developers of a Javascript-based language written for Ini configuration file parsing code library . The code base supports compatibility with the Zend file format. A security vulnerability exists in versions prior to multi-ini 2.1.2, which ste...

Sprymedia Datatables Input Validation Error Vulnerability

Sprymedia Datatables is a Javascript-based plug-in from Sprymedia UK that supports efficient data presentation on Html pages. A security vulnerability exists in Sprymedia Datatables that stems from the fact that all versions of the package datatables.net are susceptible to prototype contamination...

Js-data Security Vulnerabilities

Js-data is Js-data Js-data team of a Javascript-based ORM framework for interacting with multiple data sources . The software supports Firebase, MySql, RethinkDB, MongoDB, localStorage, Redis and other data sources. A security vulnerability exists in all versions of js-data, which stems from the...