CVE-2019-11358

CVE-2019-11358 Inquinamento del prototipo Una semplice PoC di inquinamento del prototipo che si verifica nel metodo di estensione di jQuery 3.4.0. Il primo argomento deep nel metodo extend deve essere true...

CVE-2018-16492

extend für Node.js node-extend ist ein Port der klassischen extend-Methode von jQuery. Es verhält sich so, wie man es erwartet. Es ist einfach, erprobt und bewährt. Hinweise: Seit Node.js = 4, Object.assign bietet jetzt dieselbe Funktionalität nativ allerdings ohne die Option „deep copy“. Siehe...

CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

object-deep-assign Prototype Pollution

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

GHSA-4XG3-7W7Q-856Q object-deep-assign Prototype Pollution

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

Impact What kind of vulnerability is it? Who is impacted? This vulnerability impacts all the initialization functions on the Heap and LockedHeap types, including Heap::new, Heap::init, Heap::initfromslice, and LockedHeap::new. It also affects multiple uses of the Heap::extend method. Initializati...

GHSA-XG8P-34W2-J49J linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`

Impact What kind of vulnerability is it? Who is impacted? This vulnerability impacts all the initialization functions on the Heap and LockedHeap types, including Heap::new, Heap::init, Heap::initfromslice, and LockedHeap::new. It also affects multiple uses of the Heap::extend method. Initializati...

Prototype Pollution

Overview Versions of jquery prior to 3.4.0 are vulnerable to Prototype Pollution. The extend method allows an attacker to modify the prototype for Object causing changes in properties that will exist on all objects. Recommendation Upgrade to version 3.4.0 or later. References - HackerOne Report -...

[20190403] - Core - Object.prototype pollution in JQuery $.extend

The $.extend method of JQuery is vulnerable to Object.prototype pollution attacks...