CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

Sverchok 安全漏洞

Sverchok is an application by nikitron Personal Developer. A security vulnerability exists in Sverchok version 1.3.0, which stems from prototype contamination in the function SvSetPropNodeMK2 in the file sverchok/nodes/objectnodes/getsetpropmk2.py...

Prototype Pollution

getsetprop is vulnerable to prototype pollution. The vulnerability is due to improper restrictions on proto or constructor.prototype properties, which allows an attacker to manipulate application logic, potentially leading to denial of service, remote code execution...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575: Improper Control of Generation of Code

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

npm getsetprop Security Vulnerabilities

npm getsetprop is a library from the American company npm. A security vulnerability exists in npm getsetprop version 1.1.0, which originated from allowing an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575

A Prototype Pollution issue in getsetprop 1.1.0 allows an attacker to execute arbitrary code via global.accessor...

CVE-2024-36575

The getsetprop library (version 1.1.0 ) is vulnerable to a Prototype Pollution issue. The root cause is improper restrictions on __proto__ or constructor.prototype properties. This flaw allows an attacker to manipulate application logic, which can lead to denial of service or remote code executio...

PT-2024-27075 · Unknown · Getsetprop

Name of the Vulnerable Software and Affected Versions: getsetprop version 1.1.0 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via global.accessor. Recommendations: For getsetprop version 1.1.0, consider disabling access to the global.accessor until a patch ...