6 matches found
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...
CVE-2024-40453
creationtimestamp| type| source ---|---|--- 2024-08-21 19:55:40+00:00| seen| https://t.me/cvedetector/3802 2025-06-08 09:00:05+00:00| published-proof-of-concept| Telegram/K3hUGPupZNXNHC7PAa8Zg7tP0paYLzZhTuwIsCOfHpBua0Y 2025-06-08 15:00:06+00:00| published-proof-of-concept|...
@miragon/miranum-cli (>=0.5.5, <=0.5.12) potentially affected by CVE-2024-40453 via squirrelly (9.0.0)
squirrelly NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on squirrelly and may be impacted: - @miragon/miranum-cli =0.5.5, =0.5.12 Source cves: CVE-2024-40453 Source advisory: OSV:GHSA-W5PW-GMCW-RFC8...
CVE-2024-40453
squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName...