Lucene search
+L

16 matches found

Mend
Mend
•added 2026/05/14 12:05 a.m.•2 views

WS-2016-0058

Code injection vulnerability in Dustjs-linkedin through 2.5.1 allows array variables to be applied without escaping dangerous characters...

8.7CVSS5.9AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2022-7597

Malicious code in bioql PyPI...

8.8CVSS6.7AI score0.01111EPSS
SaveExploits1References8
Veracode
Veracode
•added 2022/12/22 5:23 a.m.•25 views

Prototype Pollution

dustjs-linkedin is vulnerable to prototype pollution. The vulnerability exists because prototype attributes are not properly validated which allows an attacker to inject malicious characteristics to add new properties to a JavaScript application object prototype, overwriting or contaminating the...

8.8CVSS3.1AI score0.01111EPSS
SaveExploits1References8Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/21 9:30 p.m.•53 views

dustjs-linkedin vulnerable to Prototype Pollution

A vulnerability was found in LinkedIn dustjs prior to version 3.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched...

8.8CVSS3.7AI score0.01111EPSS
SaveExploits1References8Affected Software1
OSV
OSV
•added 2022/12/21 9:30 p.m.•57 views

GHSA-C6RP-WRP9-QR4Q dustjs-linkedin vulnerable to Prototype Pollution

A vulnerability was found in LinkedIn dustjs prior to version 3.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched...

8.8CVSS8.7AI score0.01111EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/12/21 7:15 p.m.•9 views

CVE-2021-4264

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

8.8CVSS5.4AI score0.01111EPSS
SaveExploits1References8Affected Software1
OSV
OSV
•added 2022/12/21 7:15 p.m.•21 views

CVE-2021-4264

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

8.8CVSS8.8AI score
SaveExploits0References6
NVD
NVD
•added 2022/12/21 7:15 p.m.•40 views

CVE-2021-4264

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

8.8CVSS0.01111EPSS
SaveExploits1References6
Prion
Prion
•added 2022/12/21 7:15 p.m.•22 views

Design/Logic Flaw

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

6.5CVSS8.8AI score0.01111EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2022/12/21 12:00 a.m.•47 views

CVE-2021-4264 LinkedIn dustjs prototype pollution

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

6.3CVSS9AI score0.01111EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•9 views

PT-2022-11644 · Linkedin · Dustjs

Name of the Vulnerable Software and Affected Versions: LinkedIn dustjs versions up to 2.x LinkedIn dustjs version 3.0.0 Description: A vulnerability was found in LinkedIn dustjs, allowing for improperly controlled modification of object prototype attributes, also known as 'prototype pollution'...

8.8CVSS8.8AI score0.01111EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•2 views

CVE-2021-4264: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

8.8CVSS5AI score0.01111EPSS
SaveExploits1References2
Mend
Mend
•added 2022/12/21 12:00 a.m.•2 views

CVE-2021-4264

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. The attack may be launched remotely. The...

8.8CVSS0.01111EPSS
SaveExploits1References8
CVE
CVE
•added 2022/12/21 12:00 a.m.•100 views

CVE-2021-4264

CVE-2021-4264 affects LinkedIn Dust.js up to 2.x and is caused by prototype pollution in an unknown function, potentially exploitable remotely. The issue has a patch for 3.0.0 and a patch identifier (ddb6523832465d38c9d80189e9de60519ac307c3); upgrading the affectedDust.js component to 3.0.0+ is r...

8.8CVSS7.4AI score0.01111EPSS
SaveExploits1References6Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 9:13 p.m.•11 views

Malicious code in dustjs-linkedin-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 873bc4ced308a324a98fca026bd90202448ab5890c03760bfddfee7251a7211e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 9:13 p.m.•15 views

MAL-2022-2618 Malicious code in dustjs-linkedin-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 873bc4ced308a324a98fca026bd90202448ab5890c03760bfddfee7251a7211e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder