org.webjars.npm:catharsis (=0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (=0.3.0)

org.webjars.npm:underscore-contrib MAVEN version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis =0.8.9 Source cves: CVE-2024-57081 Source advisory:...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

underscore-contrib v0.3.0 contains a prototype pollution flaw in the lib.fromQuery function. An attacker can trigger a Denial of Service by supplying a crafted payload that manipulates Object.prototype via the vulnerable path, as demonstrated in multiple sources (including Snyk reports). The core...