EUVD-2022-0606

Malicious code in bioql PyPI...

Prototype Pollution in extend2

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

GHSA-GJM5-83CW-P3P2 Prototype Pollution in extend2

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)

extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...

CVE-2021-23568

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

extend2 安全漏洞

extend2 is a simple function for extending objects. Derived from node-extend, the difference is that deep cloning overwrites the array with the original array. extend2 suffers from a security vulnerability that stems from an unsafe recursive merge...

CVE-2021-23568

CVE-2021-23568 affects the JavaScript package extend2 (versions before 1.0.1). The vulnerability is a Prototype Pollution in the extend function caused by unsafe recursive merge, enabling an attacker to inject properties (such as proto ) into Object.prototype, potentially leading to DoS or remote...

CVE-2021-23568 Prototype Pollution

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

CVE-2021-23568: Improperly Controlled Modification of Object Prototype Attributes

The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...

20190403-utils (1.0.0), @alex_xu/xdb (0.1.0-snapshot.41) +177 more potentially affected by CVE-2021-23568 via extend2 (1.0.0)

extend2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on extend2 and may be impacted: - 20190403-utils 1.0.0 - @alexxu/xdb 0.1.0-snapshot.41 - @aligov/components-page-title =1.0.0, =0.0.1, =4.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.0...