CVE-2020-36632

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

CVE-2020-36632

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

UBUNTU-CVE-2020-36632

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

CVE-2020-36632

CVE-2020-36632 affects the Node.js module hughsk flat (up to 5.0.0), where the unflatten function in index.js enables prototype pollution. This can be exploited remotely to modify Object.prototype and execute arbitrary code or cause a denial of service. A fixed version is 5.0.1, with patch refere...

@emartech/angular-translate (>=2.0.0, <=2.3.0), @fjandin/config-man (>=1.2.0, <=1.2.4) +45 more potentially affected by CVE-2020-36632 via flat (5.0.0)

flat NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @emartech/angular-translate =2.0.0, =1.2.0, =0.0.2, =0.5.2, =3.34.3, =2.3.0, =2.7.0, =0.1.2, =1.0.0, =0.2.2, =0.0.5, =0.17.0, =0.5.0, =1.3.2 - good-confi...

CVE-2020-36632 hughsk flat index.js unflatten prototype pollution

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

@biesbjerg/ng2-translate-extract (>=0.5.0, <=0.6.0), @biesbjerg/ngx-translate-extract (>=1.0.0, <=2.3.4) +67 more potentially affected by CVE-2020-36632 via flat (>=2.0.0, <=2.0.1)

flat NPM version =2.0.0, =0.5.0, =1.0.0, =9.16.1-rc.0, =0.0.1, =0.0.2-beta1, =1.2.7, =2.1.27, =2.0.7, =1.1.9, =2.3.4-atknatk.1, =0.0.1, =1.0.0, =1.0.0, =2.3.4, =2.3.5, =2.3.6 and more Source cves: CVE-2020-36632 Source advisory: MEND:CVE-2020-36632...

@arve.knudsen/bankai (>=9.6.0, <=9.10.14), @citation-js/browserify-disc (1.3.4) +64 more potentially affected by CVE-2020-36632 via flat (>=0.2.0, <=1.6.0)

flat NPM version =0.2.0, =9.6.0, =2.6.0, =1.0.0, =1.0.0-1, =0.0.1, =0.0.1, =0.0.10, =1.0.0, =7.3.0, =9.10.4, =0.0.1, =0.0.2 and more Source cves: CVE-2020-36632 Source advisory: MEND:CVE-2020-36632...

@albalyu/npm-scripts (>=2.0.1, <=2.0.40), @opuscapita/eslint-config-opuscapita-bnapp (>=1.0.1-next.0, <=1.0.6) +7 more potentially affected by CVE-2020-36632 via flat (3.0.0)

flat NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on flat and may be impacted: - @albalyu/npm-scripts =2.0.1, =1.0.1-next.0, =2.2.1, =2.0.0-beta.3, =0.0.1-beta.2, =4.0.1, =0.3.0-beta.16, =0.3.0-beta.83 Source cves: CVE-2020-36632 Sour...

CVE-2020-36632: Improperly Controlled Modification of Object Prototype Attributes

A vulnerability, which was classified as critical, was found in hughsk flat up to 5.0.0. This affects the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to initiate the atta...

PT-2022-9026

Name of the Vulnerable Software and Affected Versions hughsk flat versions up to 5.0.0 Description A critical vulnerability was found in hughsk flat, affecting the function unflatten of the file index.js. The manipulation leads to improperly controlled modification of object prototype attributes,...

Flat security vulnerabilities

flat is a library from Hugh Kennedy's personal developer. It is used to take a nested Javascript object and flatten it, or to unflatten the object using the separator key. A security vulnerability exists in versions prior to flat 5.0.1, which stems from a problem with the unflatten function in th...

shop.flatrockcellars.com Cross Site Scripting vulnerability OBB-3104855

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3934 Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin Flat PM cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin v 3.0.13 the blockid needs to start with an existing block ID...

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC v 3.0.13 the blockid needs to start with an existing block ID...

Code injection

Kirby is a flat-file CMS. In versions prior to 3.5.8.2, 3.6.6.2, 3.7.5.1, and 3.8.1, Kirby is subject to user enumeration due to Improper Restriction of Excessive Authentication Attempts. This vulnerability affects you only if you are using the code or password-reset auth method with the...

CATS - REST API Fuzzer And Negative Testing Tool For OpenAPI Endpoints

REST API fuzzer and negative testing tool. Run thousands of self-healing API tests within minutes with no coding effort! Comprehensive : tests are generated automatically based on a large number scenarios and cover every field and header Intelligent : tests are generated based on data types and...