Security update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative

This update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative fixes the following issues: CVE-2024-47535: Fixed unsafe reading of large environment files when Netty is loaded by a java application can lead to a crash due to the JVM memory limit being exceeded in netty...

GHSA-J8PX-PJMP-325F flatten-json Prototype Pollution

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

flatten-json Prototype Pollution

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

flatten-json security vulnerability

flatten-json is a Python library from the Python Foundation. A security vulnerability exists in flatten-json version 1.0.1, which stems from a vulnerability that allows attackers to execute arbitrary code via module.exports.unflattenJSON...

flatten-json Prototype Pollution

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

CVE-2024-36574

The @allanlancioni/flatten-json library (version 1.0.1 ) is vulnerable to a Prototype Pollution issue in the unflattenJSON method (located at flatten-json/index.js:42). This flaw allows an attacker to inject malicious payloads by exploiting properties such as __proto__ or constructor.prototype, p...

PT-2024-27074 · Unknown · Flatten-Json

Name of the Vulnerable Software and Affected Versions: flatten-json version 1.0.1 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via module.exports.unflattenJSON in flatten-json/index.js. Recommendations: For flatten-json version 1.0.1, consider disabling th...

commons-configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

A vulnerability was found in Apache Commons-Configuration2, where a Stack Overflow Error can occur when adding a property in AbstractListDelimiterHandler.flattenIterator. This issue could allow an attacker to corrupt memory or execute a denial of service attack by crafting malicious property that...

PT-2024-10474

Name of the Vulnerable Software and Affected Versions sqlparse affected versions not specified Description The issue is related to the sqlparse.parse function, which can lead to a Denial of Service due to a RecursionError when processing a heavily nested list. This can be exploited by a remote...

The vulnerability of the ListDelimiterHandler.flatten function in the Apache Commons Configuration library allows a attacker to execute arbitrary code.

The vulnerability of the ListDelimiterHandler.flatten function in the Apache Commons Configuration library is related to memory buffer overflows. Exploitation of this vulnerability could allow an attacker to execute arbitrary code using specially created data...

component-flatten vulnerable to Prototype Pollution

All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

byways (>=1.2.0, <=1.5.2), component-build (>=1.0.0, <=1.2.2) +16 more potentially affected by CVE-2019-10794 via component-flatten (1.0.1)

component-flatten NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on component-flatten and may be impacted: - byways =1.2.0, =1.0.0, =1.0.0, =1.3.0, =0.0.3, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0, =0.0.1, =0.0.1, =0.1.0, =0.2.0-beta3 and...

GHSA-G6R3-HHG9-QF58 component-flatten vulnerable to Prototype Pollution

All versions of component-flatten are vulnerable to Prototype Pollution. The a function could be tricked into adding or modifying properties of Object.prototype using a proto payload...

PT-2022-19262 · Adobe · Acrobat Pro Dc

Name of the Vulnerable Software and Affected Versions: Acrobat Pro DC versions 22.001.2011x and earlier Acrobat Pro DC versions 20.005.3033x and earlier Acrobat Pro DC versions 17.012.3022x and earlier Description: A use-after-free issue could result in arbitrary code execution in the context of...

Prototype Pollution in arr-flatten-unflatten

All versions of package arr-flatten-unflatten up to and including version 1.1.4 are vulnerable to Prototype Pollution via the constructor...