255 matches found
Malicious code in ophiuchus-phoenix-rimraf-convict (npm)
The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...
MAL-2025-32153 Malicious code in rest-cosmos-convict-jupiter (npm)
The package rest-cosmos-convict-jupiter was found to contain malicious code...
MAL-2025-17529 Malicious code in convict-centaurus-cosmology-odin (npm)
The package convict-centaurus-cosmology-odin was found to contain malicious code...
MAL-2025-17527 Malicious code in convict-astrometry-got-multiverse (npm)
The package convict-astrometry-got-multiverse was found to contain malicious code...
MAL-2025-23251 Malicious code in install-zenobia-convict-backend (npm)
The package install-zenobia-convict-backend was found to contain malicious code...
MAL-2025-17530 Malicious code in convict-indus-loopback-ariel (npm)
The package convict-indus-loopback-ariel was found to contain malicious code...
MAL-2025-17593 Malicious code in cors-convict-xml-paleoclimatology (npm)
The package cors-convict-xml-paleoclimatology was found to contain malicious code...
MAL-2025-26578 Malicious code in mocha-sedna-server-convict (npm)
The package mocha-sedna-server-convict was found to contain malicious code...
MAL-2025-28354 Malicious code in ophiuchus-phoenix-rimraf-convict (npm)
The package ophiuchus-phoenix-rimraf-convict was found to contain malicious code...
MAL-2025-17528 Malicious code in convict-borealis-socketio-kardashevscale (npm)
The package convict-borealis-socketio-kardashevscale was found to contain malicious code...
MAL-2025-19448 Malicious code in electron-charon-convict-meissa (npm)
The package electron-charon-convict-meissa was found to contain malicious code...
MAL-2025-29148 Malicious code in phoenix-xanadu-convict-nightmare (npm)
The package phoenix-xanadu-convict-nightmare was found to contain malicious code...
MAL-2025-24133 Malicious code in jwt-convict-dependencies-resolvers (npm)
The package jwt-convict-dependencies-resolvers was found to contain malicious code...
MAL-2025-15822 Malicious code in blitz-stream-convict-webdriverio (npm)
The package blitz-stream-convict-webdriverio was found to contain malicious code...
The vulnerability of Mozilla Convict’s library involves uncontrolled changes to object prototype attributes, allowing attackers to execute arbitrary code.
The vulnerability of the Mozilla Convict library is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2023-0163
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...
CVE-2023-0163 Prototype Pollution in convict
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...
CVE-2023-0163 Prototype Pollution in convict
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...
CVE-2023-0163 Prototype Pollution in convict
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a...
convict 安全漏洞
convict is a featured configuration management library for Node.js. A security vulnerability exists in convict, which stems from improperly controlled modifications to object prototype attributes...