7 matches found
CVE-2024-57068
A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@account-kit/react (>=4.0.0-alpha.0, <=4.88.5), @account-kit/react-native (>=4.15.0, <=4.88.5) +54 more potentially affected by CVE-2024-57068 via @tanstack/form-core (>=0.0.1, <=0.42.0)
@tanstack/form-core NPM version =0.0.1, =4.0.0-alpha.0, =4.15.0, =3.13.0, =0.0.1, =0.1.1, =0.0.1, =1.0.0, =0.3.5, =0.3.3, =5.0.0 and more Source cves: CVE-2024-57068 Source advisory: OSV:GHSA-GGV3-VMGW-XV2Q...
CVE-2024-57068
creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxaglal2w...
CVE-2024-57068
A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57068
A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57068
The @tanstack/form-core library (specifically version v0.35.0 ) is vulnerable to prototype pollution within the lib.mutateMergeDeep function. This flaw occurs due to improper handling of object properties, which allows an attacker to inject properties into JavaScript prototypes by supplying a cra...
