GHSA-8MMM-9V2Q-X3F9 tschaub gh-pages vulnerable to prototype pollution

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js...

tschaub gh-pages vulnerable to prototype pollution

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

Code injection

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

PT-2022-24026 · Unknown · Tschaub Gh-Pages

Name of the Vulnerable Software and Affected Versions: tschaub gh-pages version 3.1.0 Description: The issue is related to a prototype pollution vulnerability. It is exploited via the partial variable in util.js. Recommendations: For tschaub gh-pages version 3.1.0, consider restricting access to...

gh-pages 安全漏洞

gh-pages is a general-purpose task for Tim Schaub's personal developer to publish files to the gh-pages branch on GitHub. A security vulnerability exists in gh-pages version 3.1.0, which stems from a prototype contamination vulnerability via some variables in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

CVE-2022-37611

The CVE-2022-37611 entry documents a prototype pollution vulnerability in tschaub gh-pages version 3.1.0, caused by unsafe handling of the partial variable in util.js. The root cause is lack of validation on the partial property, enabling an attacker to contaminate a JavaScript object prototype. ...

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js...

Malicious code in action-publish-gh-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-833 Malicious code in action-publish-gh-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a74ffd02c6f641086cd42add073f54fb155173390cde20c495999e563ff0471 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

grunt-library-builder (>=0.0.2, <=0.2.2), happyplan (>=0.3.0-beta.7, <=0.4.1) +5 more potentially affected by CVE-2016-10526 via grunt-gh-pages (>=0.7.6, <=0.9.1)

grunt-gh-pages NPM version =0.7.6, =0.0.2, =0.3.0-beta.7, =0.3.0, =0.4.5, =0.14.7 Source cves: CVE-2016-10526 Source advisory: OSV:GHSA-RRJ3-QMH8-72PF...

GHSA-RRJ3-QMH8-72PF grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

Versions of grunt-gh-pages prior to 0.10.0 are affected by a vulnerability which may cause unencrypted GitHub credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a GitHub token directly into the...