PT-2026-42701

Summary The copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys proto , constructor, prototype. This allows an attacker to pollute the prototype chain of all objects in the...

EUVD-2022-0525

Malicious code in bioql PyPI...

@alxandr/gatsby-transformer-blog-post (>=0.1.2 <=0.1.18), @lazurski/gulp (=4.0.0-alpha.2-1) +73 more potentially affected by CVE-2020-28503 via copy-props (=1.6.0)

copy-props NPM version =1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on copy-props and may be impacted: - @alxandr/gatsby-transformer-blog-post =0.1.2, =0.0.18, =0.3.1-vnext, =0.3.1-vnext, =0.4.116-vnext, =0.3.1-vnext, =0.3.1-vnext, =0.3.1-vnext,...

GHSA-897M-RJF5-JP39 Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

Prototype Pollution in copy-props

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

Prototype Pollution

copy-props is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the main functionality and modify attributes such as proto, constructor and prototype...

CVE-2020-28503

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503 Prototype Pollution

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503

Copy-props before 2.0.5 is vulnerable to Prototype Pollution via its main functionality. The issue arises from unsafe merge of objects, allowing an attacker to inject properties into Object.prototype (e.g., via proto ), with potential impact including denial of service and, in some descriptions, ...

Takayuki Sato copy-props 安全漏洞

Takayuki Sato copy-props is Takayuki Sato open source an application system . It is used to deeply copy properties between two objects. A security vulnerability exists in copy-props before 2.0.5, which stems from susceptibility to prototype contamination...