debug 安全漏洞

debug is a small JavaScript debugging utility open-sourced by Debug.js modeled on core Node.js debugging techniques. A security vulnerability exists in debug version 4.4.2, which stems from a phishing attack leading to account takeover, where malware may redirect cryptocurrency transactions...

Prototype Pollution

node-forge is vulnerable to prototype pollution. The vulnerability exists through the 'debug.set' function in 'debug.js' , allowing an attacker to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...