5 matches found
CVE-2023-26113
Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js...
7.5CVSS6.8AI score0.0122EPSS
SaveExploits1References1
CVE-2023-26113
creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5544...
7.5CVSS7.3AI score0.0122EPSS
SaveExploits1References1
CVE-2023-26113
CVE-2023-26113 affects the JavaScript package collection.js prior to 6.8.1. The root cause is a Prototype Pollution vulnerability in the extend function located at Collection.js/dist/node/iterators/extend.js, enabling polluted prototypes. Multiple sources (NVD, Red Hat, GHSA, OSV, CVE CVE lists) ...
7.5CVSS7.5AI score0.0122EPSS
SaveExploits1References5Affected Software1
20