org.webjars.npm:catharsis (0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (0.3.0)

org.webjars.npm:underscore-contrib MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis 0.8.9 Source cves: CVE-2024-57081 Source advisory:...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

The underscore-contrib library (version v0.3.0 ) is vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can provide a crafted payload containing an Object.prototype setter to inject or modify properties within the global prototype chain. This can result in a Denial o...