CVE-2024-57074

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxjv5qq2b...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

The JavaScript library xe-utils version v3.5.31 is vulnerable to a prototype pollution in the lib.merge function. Attackers can exploit this by supplying a crafted payload to inject properties into existing JavaScript language construct prototypes, such as Object.prototype. This can lead to a Den...