CVE-2021-25945

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25945

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25945

CVE-2021-25945 affects the npm module js-extend (versions 0.0.1–1.0.1). A prototype pollution flaw is described as enabling denial of service and potentially remote code execution. The connected sources reiterate the vulnerability and recommend avoiding js-extend, but no concrete patch/version is...

js-extend 安全漏洞

js-extend is a module for Npm with extension capabilities. A security vulnerability exists in js-extend versions 0.0.1 through 1.0.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

PT-2021-16871

Name of the Vulnerable Software and Affected Versions js-extend versions 0.0.1 through 1.0.1 Description The issue is related to a prototype pollution vulnerability. This vulnerability allows an attacker to cause a denial of service and may potentially lead to remote code execution. Recommendatio...

CVE-2021-25945: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...

PYSEC-2021-87

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

CVE-2021-32629: Access of Memory Location After End of Buffer

Cranelift is an open-source code generator maintained by Bytecode Alliance. It translates a target-independent intermediate representation into executable machine code. There is a bug in 0.73 of the Cranelift x64 backend that can create a scenario that could result in a potential sandbox escape i...

[SECURITY] Fedora 32 Update: prosody-0.11.9-1.fc32

Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...

PT-2021-19817

Name of the Vulnerable Software and Affected Versions Cranelift versions 0.73.0 Description There is a bug in the Cranelift x64 backend that can create a scenario resulting in a potential sandbox escape in a WebAssembly module. The bug performs a sign-extend instead of a zero-extend on a value...

Prototype Pollution in jalik/js-deep-extend

✍️ Description Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. JavaScript allows all Object attributes to be altered, including their magical attributes such as proto, constructor and prototype. An attacker...

GHSA-CG42-4WRC-GP47 Code Injection in node-extend

node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...

Code Injection in node-extend

node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...

WS-2021-0096

Prototype pollution vulnerability in jquery-extend versions 1.10.2 through 2.0.3 allows an attacker to cause a denial of service and may lead to remote code execution...

WS-2021-0092

Prototype pollution vulnerability in object-extend version 0.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution in decal

This affects all versions of package decal. The vulnerability is in the extend function...

GHSA-J32X-J8PJ-PG2H Prototype Pollution in decal

This affects all versions of package decal. The vulnerability is in the extend function...

Rust Out-of-Bounds Write Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust on 2021-02-19 and earlier versions, which stems from an out-of-bounds write in StackVec::extend that could result in an out-of-bounds write if certain exception data is...