16 matches found
EUVD-2022-0606
Malicious code in bioql PyPI...
Prototype Pollution in extend2
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
GHSA-GJM5-83CW-P3P2 Prototype Pollution in extend2
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)
extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...
20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)
extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...
CVE-2021-23568
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
CVE-2021-23568
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
extend2 security vulnerability
extend2 is a simple function for extending objects. Derived from node-extend, the difference is that deep cloning overwrites the array with the original array. extend2 suffers from a security vulnerability that stems from an unsafe recursive merge...
CVE-2021-23568
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)
extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...
CVE-2021-23568 Prototype Pollution
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
CVE-2021-23568
CVE-2021-23568 affects the JavaScript package extend2 (versions before 1.0.1). The vulnerability is a Prototype Pollution in the extend function caused by unsafe recursive merge, enabling an attacker to inject properties (such as proto ) into Object.prototype, potentially leading to DoS or remote...
PT-2022-9415
Name of the Vulnerable Software and Affected Versions extend2 versions prior to 1.0.1 Description The issue concerns Prototype Pollution via the extend function due to an unsafe recursive merge. This allows for potential manipulation of the prototype, which can lead to various security issues...
CVE-2021-23568: Improperly Controlled Modification of Object Prototype Attributes
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)
extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...