CVE-2024-57072

A prototype pollution in the lib.requireFromString function of module-from-string v3.3.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@alvori/app (>=1.0.0-beta.11, <=1.0.0-beta.12), @enhanced-dom/intl (>=0.0.1, <=0.2.0) +111 more potentially affected by CVE-2024-57072 via module-from-string (>=3.3.0, <=3.3.1)

module-from-string NPM version =3.3.0, =1.0.0-beta.11, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.2, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.3.0 and more Source cves: CVE-2024-57072 Source advisory: OSV:GHSA-Q5J8-9M9G-X2JH...

CVE-2024-57072

creationtimestamp| type| source ---|---|--- 2025-02-05 21:32:43+00:00| seen| https://infosec.exchange/users/cve/statuses/113953417674192292 2025-02-05 22:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxhnmxl2n...

CVE-2024-57072

A prototype pollution in the lib.requireFromString function of module-from-string v3.3.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...