EUVD-2021-1422

Malware in sbrugna...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

@gryphoon/components (>=1.0.8 <=1.0.9), @hckr_/blendid (>=7.0.0 <=9.6.15) +26 more potentially affected by CVE-2021-25948 via expand-hash (>=0.2.2 <=1.0.1)

expand-hash NPM version =0.2.2, =1.0.8, =7.0.0, =0.1.2, =1.0.0, =0.1.0, =0.0.5, =0.8.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =0.1.0, =0.4.0 and more Source cves: CVE-2021-25948 Source advisory: OSV:GHSA-X3WR-V4WX-5QPC...

GHSA-X3WR-V4WX-5QPC Prototype Pollution

Prototype pollution vulnerability in ‘expand-hash’ versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

Prototype pollution vulnerability in ‘expand-hash’ versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

Prototype pollution vulnerability in 'expand-hash' versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25948

The vulnerability CVE-2021-25948 affects the expand-hash package (versions 0.1.0–1.0.1). The root cause is a prototype pollution issue in expand-hash that allows an attacker to cause a denial of service and may lead to remote code execution. Impact reported includes network-accessible exploitatio...

expand-hash 安全漏洞

expand-hash is a package. Attribute keys can be expanded recursively into objects using dot notation. A security vulnerability exists in expand-hash versions 0.1.0 through 1.0.1 that results in a denial of service and can lead to remote code execution...