CVE-2023-26113

Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js...

CVE-2023-26113

creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5544...

@pzlr/build-core (>=2.14.0 <=2.15.1-beta.1), @v4fire/cli (>=1.3.0 <=2.1.0) +13 more potentially affected by CVE-2023-26113 via collection.js (>=5.5.6 <=6.7.11)

collection.js NPM version =5.5.6, =2.14.0, =1.3.0, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0, =6.0.0, =3.0.1, =7.1.0, =2.0.0, =2.0.0, =7.0.10, =7.1.0, =6.0.0, =7.0.0, =7.1.0 Source cves: CVE-2023-26113 Source advisory: OSV:GHSA-47PJ-Q2VM-46XC...

CVE-2023-26113

Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js...

CVE-2023-26113

Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js...

CVE-2023-26113

CVE-2023-26113 affects the JavaScript package collection.js prior to 6.8.1. The root cause is a Prototype Pollution vulnerability in the extend function located at Collection.js/dist/node/iterators/extend.js, enabling polluted prototypes. Multiple sources (NVD, Red Hat, GHSA, OSV, CVE CVE lists) ...