CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@account-kit/react (>=4.0.0-alpha.0, <=4.88.5), @account-kit/react-native (>=4.15.0, <=4.88.5) +52 more potentially affected by CVE-2024-57068 via @tanstack/form-core (>=0.0.1, <=0.42.0)

@tanstack/form-core NPM version =0.0.1, =4.0.0-alpha.0, =4.15.0, =3.13.0, =0.0.1, =0.1.1, =0.0.1, =1.0.0, =0.3.5, =0.3.3, =4.3.0 and more Source cves: CVE-2024-57068 Source advisory: OSV:GHSA-GGV3-VMGW-XV2Q...

CVE-2024-57068

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxaglal2w...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57068

A prototype pollution in the lib.mutateMergeDeep function of @tanstack/form-core v0.35.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57068

Prototype pollution in @tanstack/form-core lib.mutateMergeDeep (v0.35.0) allows crafted payloads to trigger a DoS. PoC exists per connected sources; no patch/version remediation details provided in the documents. Affected: core library function; root cause: unsafe object property handling leading...