Astra Linux - уязвимость в dojo

All versions of the dojo package are vulnerable to Prototype Pollution through the setObject function...

EUVD-2020-0349

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-23450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CVE-2021-23450 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2020-5258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of dojo NPM package, the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properti...

Mageia: Security Advisory (MGASA-2023-0039)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM WebSphere Application Server 7.x <= 7.0.0.45 / 8.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.22 / 9.x < 9.0.5.12 RCE

The IBM WebSphere Application Server installed on the remote host is affected by a remote code execution vulnerability due to the Dojo package, which is vulnerable to vulnerable to Prototype Pollution via the setObject function. Note that Nessus has not tested for this issue but has instead relie...

DEBIAN-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

Code injection

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

[SECURITY] [DLA 2127-1] dojo security update

Package : dojo Version : 1.10.2+dfsg-1+deb8u2 CVE ID : CVE-2019-10785 Debian Bug : 952771 dojox was vulnerable to Cross-site Scripting. This was due to dojox.xmpp.util.xmlEncode only encoding the first occurrence of each character, not all of them. For Debian 8 "Jessie", this problem has been fix...