Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-1107

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00633EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-6167

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01862EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-1121

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00982EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2022/06/18 12:0 a.m.23 views

Prototype Pollution in mout

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

7.5CVSS4.1AI score0.01862EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2022/06/17 8:5 p.m.17 views

CVE-2022-21213 Prototype Pollution

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...

7.5CVSS7.8AI score0.01862EPSS
Exploits1References5
OSV
OSV
added 2022/02/09 10:49 p.m.0 views

GHSA-PC58-WGMC-HFJR Prototype Pollution in mout

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'. In both cases, the key used to access the target object recursive...

7.5CVSS5.9AI score0.00982EPSS
Exploits1References7
OSV
OSV
added 2020/12/15 8:15 a.m.0 views

CVE-2020-28442

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function...

9.8CVSS7.3AI score0.00633EPSS
Exploits1References4
Cvelist
Cvelist
added 2020/12/15 7:25 a.m.16 views

CVE-2020-28442 Prototype Pollution

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn function...

7.5CVSS8.6AI score0.00633EPSS
Exploits1References4
CNNVD
CNNVD
added 2020/12/15 12:0 a.m.3 views

Js-data Security Vulnerabilities

Js-data is Js-data Js-data team of a Javascript-based ORM framework for interacting with multiple data sources . The software supports Firebase, MySql, RethinkDB, MongoDB, localStorage, Redis and other data sources. A security vulnerability exists in all versions of js-data, which stems from the...

9.8CVSS7.3AI score0.00633EPSS
Exploits1References5
CVE
CVE
added 2020/12/11 11:5 a.m.51 views

CVE-2020-7792

The CVE-2020-7792 entry applies to the mout package where the deepFillIn and deepMixIn functions perform recursive operations without properly checking the target property key. This enables Prototype Pollution across all versions of mout and can affect Object.prototype when exploited via recursiv...

7.5CVSS7.3AI score0.00982EPSS
Exploits1References5Affected Software1
Snyk
Snyk
added 2020/09/30 3:6 p.m.1 views

Prototype Pollution

Overview mout is a Modular Utilities Affected versions of this package are vulnerable to Prototype Pollution. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing existing child objects as well'...

7.5CVSS8AI score0.00982EPSS
Exploits1References2
Rows per page
Query Builder