EUVD-2015-1982

Malware in sbrugna...

EUVD-2019-4972

Malware in sbrugna...

EUVD-2019-17735

Malware in sbrugna...

EUVD-2021-13130

Malware in sbrugna...

EUVD-2021-13215

Malware in sbrugna...

EUVD-2015-1375

Malware in sbrugna...

EUVD-2021-1289

Malware in sbrugna...

EUVD-2017-4534

Malware in sbrugna...

EUVD-2025-22686

Malicious code in bioql PyPI...

EUVD-2023-54130

Malicious code in bioql PyPI...

EUVD-2025-31068

Malicious code in bioql PyPI...

EUVD-2024-52839

Malicious code in bioql PyPI...

EUVD-2024-23051

Malicious code in bioql PyPI...

Prototype Pollution

Overview org.webjars.npm:dagre-d3-es is a a href="https://www.npmjs.com/dagre- Affected versions of this package are vulnerable to Prototype Pollution via the addConflict function in the bk module. An attacker can modify the JavaScript Object prototype chain by injecting malicious input values,...

Prototype Pollution

Overview dagre-d3-es is a a href="https://www.npmjs.com/dagre- Affected versions of this package are vulnerable to Prototype Pollution via the addConflict function in the bk module. An attacker can modify the JavaScript Object prototype chain by injecting malicious input values, which may result ...

@142vip/vitepress (>=0.0.1-alpha.23, <=0.0.1-alpha.24), @7nohe/vite-plugin-vue-marked (0.2.1) +571 more potentially affected by CVE-2025-57347 via dagre-d3-es (>=7.0.4, <=7.0.11)

dagre-d3-es NPM version =7.0.4, =0.0.1-alpha.23, =0.18.0-beta.0, =0.3.0, =1.0.3, =0.17.0-alkemio-1, =0.4.0, =1.0.0, =3.130.1, =1.19.0, =1.0.0, =0.18.3, =0.18.0-1, =0.18.0 and more Source cves: CVE-2025-57347 Source advisory: SNYK:JS-DAGRED3ES-13110069...

CVE-2025-57347

A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplied input during property assignment operations. This flaw allows attackers to exploit prototype pollution...

CVE-2025-57347

CVE-2025-57347 affects the Node.js package dagre-d3-es (v7.0.9 affected; patched in newer releases). The vulnerability resides in the bk module’s addConflict() where user input is not properly sanitized during property assignment, enabling prototype pollution via inputs like proto . This can poll...

PT-2025-39322

Name of the Vulnerable Software and Affected Versions dagre-d3-es versions prior to 7.0.11 Description A flaw exists in the 'dagre-d3-es' Node.js package within the 'bk' module’s addConflict function. The issue stems from inadequate input sanitization during property assignment, allowing prototyp...

CVE-2025-57347

A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplied input during property assignment operations. This flaw allows attackers to exploit prototype pollution...