CVE-2020-7715

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

CVE-2020-7715

CVE-2020-7715 affects the npm package deep-get-set . The vulnerability is a prototype pollution flaw in the main function, arising from an incomplete fix, allowing an attacker to pollute Object.prototype (e.g., via the key path "proto " or related paths). Affected versions are those before the re...

CVE-2020-7715 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

@draadnl/openstad-cms (>=0.12.2, <=0.12.3), @ngodn/apostrophe (>=2.94.2, <=2.94.7) +37 more potentially affected by CVE-2020-7715 via deep-get-set (0.1.1)

deep-get-set NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - @draadnl/openstad-cms =0.12.2, =2.94.2, =1.3.0, =0.0.1, =0.5.235, =2.94.1, =0.5.0, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =2.93.0, =2.93...

CVE-2020-7715

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

CVE-2020-7715

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

CVE-2020-7715: Improperly Controlled Modification of Object Prototype Attributes

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

PT-2020-19737 · Npm · Deep-Get-Set

Name of the Vulnerable Software and Affected Versions: deep-get-set versions prior to 1.1.1 Description: The issue concerns Prototype Pollution via the main function. Recommendations: For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...

Prototype Pollution

Overview deep-get-set is a Set and get values on objects via dot-notation strings. Affected versions of this package are vulnerable to Prototype Pollution via the main function. POC: const deep = require'deep-get-set'; deep, 'proto', 'polluted', true; console.logpolluted; Details Prototype...

CVE-2019-11400

An issue was discovered on TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices. A buffer overflow occurs through the getset.ccp ccpact parameter...

CVE-2016-3102

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs 1 direct field access or 2 get/set array operations...