EUVD-2024-53518

Malicious code in bioql PyPI...

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

...

Prototype Pollution

eazy-logger is vulnerable to prototype pollution. The vulnerability is due to prototype pollution caused by the lib.Logger function allowing attackers to supply a crafted payload, leading to a Denial of Service DoS...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@funboxteam/blueprinter (>=5.3.2, <=6.1.0), @henrycatalinismith/11tysnap (0.0.15) +1 more potentially affected by CVE-2024-57075 via eazy-logger (>=4.0.0, <=4.0.1)

eazy-logger NPM version =4.0.0, =5.3.2, =2.28.0, =2.28.2 Source cves: CVE-2024-57075 Source advisory: OSV:GHSA-R7JX-5M6M-CPG9...

GHSA-R7JX-5M6M-CPG9 eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Prototype Pollution

Overview org.webjars.npm:eazy-logger is a Simple cli logger Affected versions of this package are vulnerable to Prototype Pollution in the Logger function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...

CVE-2024-57075

The eazy-logger library (version 4.0.1 ) is vulnerable to a prototype pollution flaw within the lib.Logger function. An attacker can provide a crafted payload with an Object.prototype setter to modify properties within the global prototype chain. This can result in a Denial of Service (DoS) at a ...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57075: Uncontrolled Resource Consumption

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

eazy-logger 安全漏洞

eazy-logger is a simple cli logger by Shane Osbourne Personal Developer. A security vulnerability exists in eazy-logger version v4.0.1, which stems from the lib.Logger function containing a prototype contamination vulnerability...