portofolio_DWForSec

DwF — Cybersecurity Portfolio A professional cybersecurity po...

EUVD-2021-0494

Malware in sbrugna...

Malicious code in robotkittens-gsap (npm)

The package robotkittens-gsap was found to contain malicious code...

MAL-2025-32331 Malicious code in robotkittens-gsap (npm)

The package robotkittens-gsap was found to contain malicious code...

Prototype Pollution

Overview There is a prototype pollution vulnerability in gsap which affects all versions before 3.6.0. Recommendation Upgrade to 3.6.0 or later References - GitHub Advisory - Snyk Advisory...

Prototype pollution in gsap

There is a prototype pollution vulnerability in gsap which affects all versions before 3.6.0...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: OSV:GHSA-6G8V-HPGW-H2V7...

GHSA-6G8V-HPGW-H2V7 Prototype pollution in gsap

There is a prototype pollution vulnerability in gsap which affects all versions before 3.6.0...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: GHSA-6G8V-HPGW-H2V7...

Prototype Pollution

gsap is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2020-28478

This affects the package gsap before 3.6.0...

CVE-2020-28478

This affects the package gsap before 3.6.0...

Code injection

This affects the package gsap before 3.6.0...

CVE-2020-28478

The CVE-2020-28478 entry concerns the gsap JavaScript library with a Prototype Pollution vulnerability affecting all versions before 3.6.0. The connected documents corroborate that an attacker could pollute Object.prototype via unsafe recursive merges or path-based property definitions, enabling ...

3d-force-graph (>=1.29.0, <=1.29.2), @a-g/game (>=1.0.0, <=1.8.21) +530 more potentially affected by CVE-2020-28478 via gsap (>=1.16.1, <=3.5.1)

gsap NPM version =1.16.1, =1.29.0, =1.0.0, =0.0.1, =0.1.6, =0.0.1, =0.1.7, =1.0.2, =0.1.55-alpha.0, =0.0.5, =0.0.1, =0.0.1, =0.3.5 and more Source cves: CVE-2020-28478 Source advisory: MEND:CVE-2020-28478...

CVE-2020-28478 Prototype Pollution

This affects the package gsap before 3.6.0...

CVE-2020-28478

This affects the package gsap before 3.6.0...

PT-2021-11541

Name of the Vulnerable Software and Affected Versions: gsap versions prior to 3.6.0 Description: The issue is related to a prototype pollution vulnerability. It is reported to affect all versions of gsap before 3.6.0. Recommendations: For versions prior to 3.6.0, update to version 3.6.0 or later ...

CVE-2020-28478: Undefined Security Weakness

This affects the package gsap before 3.6.0...

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: SNYK:JS-GSAP-1054614...