5 matches found
CVE-2024-24293
A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js...
@bit/bundler (>=12.0.0, <=12.1.3), pakit (>=2.0.0, <=2.3.0) potentially affected by CVE-2024-24293 via @bit/loader (10.0.3)
@bit/loader NPM version 10.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @bit/loader and may be impacted: - @bit/bundler =12.0.0, =2.0.0, =2.3.0 Source cves: CVE-2024-24293 Source advisory: OSV:GHSA-8VR4-H4RR-8PH6...
CVE-2024-24293
CVE-2024-24293 affects MiguelCastillo @bit/loader (version 10.0.3). The root cause is a prototype pollution flaw in the M function’s e argument within index.js, enabling arbitrary code execution. Exploitation status is not detailed in the provided documents. Remediation guidance from PT-Security ...
