PT-2026-42701

Name of the Vulnerable Software and Affected Versions @nevware21/ts-utils versions prior to 0.14.0 Description The copyProps function in lib/src/object/copy.ts iterates over source object properties using a for...in loop without performing an Object.hasOwnProperty check. Additionally, it fails to...

EUVD-2022-0525

Malicious code in bioql PyPI...

GHSA-897M-RJF5-JP39 Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

Prototype Pollution

copy-props is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the main functionality and modify attributes such as proto, constructor and prototype...

CVE-2020-28503

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503

Copy-props before 2.0.5 is vulnerable to Prototype Pollution via its main functionality. The issue arises from unsafe merge of objects, allowing an attacker to inject properties into Object.prototype (e.g., via proto ), with potential impact including denial of service and, in some descriptions, ...

@alxandr/gatsby-transformer-blog-post (>=0.1.2, <=0.1.18), @lazurski/gulp (4.0.0-alpha.2-1) +73 more potentially affected by CVE-2020-28503 via copy-props (1.6.0)

copy-props NPM version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on copy-props and may be impacted: - @alxandr/gatsby-transformer-blog-post =0.1.2, =0.0.18, =0.3.1-vnext, =0.3.1-vnext, =0.4.116-vnext, =0.3.1-vnext, =0.3.1-vnext, =0.3.1-vnext,...

CVE-2020-28503

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503 Prototype Pollution

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503: Undefined Security Weakness

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

Takayuki Sato – Copy-props: Security Vulnerabilities

Takayuki Sato copy-props is Takayuki Sato open source an application system . It is used to deeply copy properties between two objects. A security vulnerability exists in copy-props before 2.0.5, which stems from susceptibility to prototype contamination...

PT-2021-11558

Name of the Vulnerable Software and Affected Versions: copy-props versions prior to 2.0.5 Description: The issue concerns Prototype Pollution via the main functionality of the copy-props package. Recommendations: For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue...