GHSA-77RM-9X9H-XJ3G vulnerabilities

Vulnerabilities for packages: spark-fips, druid, spark, hadoop-client-modules, mysql...

CVE-2021-22570 vulnerabilities

Vulnerabilities for packages: spark-fips, druid, spark, hadoop-client-modules, mysql...

CVE-2021-22570 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2021-22569 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, druid, trino, celeborn...

CVE-2021-22569 vulnerabilities

Vulnerabilities for packages: celeborn, trino...

GHSA-WRVW-HG22-4M67 vulnerabilities

Vulnerabilities for packages: celeborn, trino...

GHSA-WRVW-HG22-4M67 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, druid, trino, celeborn...

GHSA-6G47-63MV-QPGH Prototype Pollution in dotty

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

3m5-coco (>=0.0.2 <=0.0.981), @24hr/sentry-logger-node (>=0.4.0 <=1.2.2) +278 more potentially affected by CVE-2021-23624 via dotty (>=0.0.1 <=0.1.1)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol =1.1.2 and more Source cves: CVE-2021-23624 Source advisory: OSV:GHSA-6G47-63MV-QPGH...

Prototype Pollution in dotty

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Unspecified vulnerability in Deoxxa dotty

Deoxxa Dotty is a Javascript-based code base used by Deoxxa individual developers to support access to object properties. deoxxa dotty has a security vulnerability that stems from a design or implementation impropriety in the code development process of a web-based system or product. No details o...

Prototype Pollution

dotty is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes via the put function and modify attributes such as proto, constructor, and prototype...

CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

Type confusion

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624 Prototype Pollution

This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays...

CVE-2021-23624

CVE-2021-23624 affects the dotty package prior to v0.1.2 and describes a type confusion vulnerability that can bypass CVE-2021-25912 when user-provided path keys are arrays. The issue is consistently reported across multiple sources (NVD/OSV/GHSA/CVE List) as a prototype pollution/type confusion ...

Deoxxa dotty 安全漏洞

Deoxxa Dotty is a Javascript-based code base used by Deoxxa individual developers to support access to object properties. deoxxa dotty has a security vulnerability that stems from a design or implementation impropriety in the code development process of a web-based system or product. No details o...

3m5-coco (>=0.0.2 <=0.0.981), @24hr/sentry-logger-node (>=0.4.0 <=1.2.2) +278 more potentially affected by CVE-2021-23624 +1 more via dotty (>=0.0.1 <=0.1.1)

dotty NPM version =0.0.1, =0.0.2, =0.4.0, =1.1.4, =0.0.2, =1.15.3, =0.1.0, =0.1.6, =1.0.4, =0.1.6, =0.1.0, =1.0.0, =1.0.0, =1.0.7 - @kikiemz/komzpol =1.1.2 and more Source cves: CVE-2021-23624, CVE-2021-25912 Source advisory: SNYK:JS-DOTTY-1577292...

Prototype Pollution

Overview dotty is a package that can access properties of nested objects using dot-path notation. Affected versions of this package are vulnerable to Prototype Pollution. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter a...