CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

Sverchok 安全漏洞

Sverchok is an application by nikitron Personal Developer. A security vulnerability exists in Sverchok version 1.3.0, which stems from prototype contamination in the function SvSetPropNodeMK2 in the file sverchok/nodes/objectnodes/getsetpropmk2.py...

Prototype Pollution

getsetprop is vulnerable to prototype pollution. The vulnerability is due to improper restrictions on proto or constructor.prototype properties, which allows an attacker to manipulate application logic, potentially leading to denial of service, remote code execution...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

npm getsetprop Security Vulnerabilities

npm getsetprop is a library from the American company npm. A security vulnerability exists in npm getsetprop version 1.1.0, which originated from allowing an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575

CVE-2024-36575 affects getsetprop 1.1.0, with a prototype pollution flaw that can allow an attacker to execute arbitrary code via global.accessor. NVD/NVD-related entries cite code execution, while Veracode notes pollution via proto /constructor.prototype that could disrupt logic and lead to remo...

PT-2024-27075 · Unknown · Getsetprop

Name of the Vulnerable Software and Affected Versions: getsetprop version 1.1.0 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via global.accessor. Recommendations: For getsetprop version 1.1.0, consider disabling access to the global.accessor until a patch ...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...