Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution in the deepRef function of lib/compiler.js, which traverses through a scalar value into the prototype chain, and whose containment guard is missed because currentPath inconsistently holds arrays that coerce to...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution in the deepRef function of lib/compiler.js, which traverses through a scalar value into the prototype chain, and whose containment guard is missed because currentPath inconsistently holds arrays that coerce to...

EUVD-2021-2172

Malware in sbrugna...

GHSA-7C7G-72Q7-4XHM Prototype pollution vulnerability in 'deepref'

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

Prototype pollution vulnerability in 'deepref'

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

deepref is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

Remote code execution

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28274

CVE-2020-28274 is a prototype pollution vulnerability in the Node.js package deepref , affecting versions 1.1.1 through 1.2.1 . The provided connected documents describe that an attacker can cause a denial of service and may lead to remote code execution . There are no explicit exploit steps or i...

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2020-28274: Undefined Security Weakness

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

deepref to security vulnerabilities

Isaymatato Deepref is a JS-written codebase for interacting with dictionary-type data by the individual developer Isaymatato. A security vulnerability exists in deepref versions 1.1.1 through 1.2.1, which stems from a prototype contamination vulnerability in allows an attacker to exploit the...