EUVD-2022-0606

Malicious code in bioql PyPI...

20190403-utils (=1.0.0), @alex_xu/xdb (=0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (=1.0.0)

extend2 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils =1.0.0 - @alexxu/xdb =0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...

GHSA-GJM5-83CW-P3P2 Prototype Pollution in extend2

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

Prototype Pollution in extend2

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

extend2 安全漏洞

extend2 is a simple function for extending objects. Derived from node-extend, the difference is that deep cloning overwrites the array with the original array. extend2 suffers from a security vulnerability that stems from an unsafe recursive merge...

CVE-2021-23568 Prototype Pollution

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568

CVE-2021-23568 affects the JavaScript package extend2 (versions before 1.0.1). The vulnerability is a Prototype Pollution in the extend function caused by unsafe recursive merge, enabling an attacker to inject properties (such as proto ) into Object.prototype, potentially leading to DoS or remote...

20190403-utils (=1.0.0), @alex_xu/xdb (=0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (=1.0.0)

extend2 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils =1.0.0 - @alexxu/xdb =0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0,...