Prototype Pollution

@almela/obx is vulnerable to Prototype Pollution. The vulnerability is caused by improper handling of JavaScript object prototypes within index.js, which allows an attacker to manipulate object prototypes, potentially leading to arbitrary code execution or unexpected application behavior...

Prototype Pollution

@alexbinary/object-deep-assign is vulnerable to Prototype Pollution. The vulnerability is due to the lack of prototype checks in the extend function within index.js. Attackers can exploit this method to copy malicious properties to the built-in Object.prototype through special properties like pro...

Prototype Pollution

@akbr/update is vulnerable to Prototype Pollution. The vulnerability is due to manipulation of the objects prototype via update/index.js, potentially allowing attackers to alter application behavior or execute arbitrary code...

@akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36582

alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend method of Module.deepAssign /src/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

PT-2024-27073 · Almela · Obx

Name of the Vulnerable Software and Affected Versions: almela obx versions prior to 0.0.4 Description: The issue allows arbitrary code execution via the obx/build/index.js component, specifically through the reduce function at @almela/obx/build/index.js:470 and Object.set at obx/build/index.js:26...

CVE-2024-36574

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

PT-2024-27077 · Unknown · Akbr Update

Name of the Vulnerable Software and Affected Versions: akbr update version 1.0.0 Description: The issue is related to Prototype Pollution, which occurs via the update/index.js file. Recommendations: For akbr update version 1.0.0, consider restricting access to the update/index.js file as a...

CVE-2024-36573

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656, reduce @almela/obx/build/index.js:470, Object.set obx/build/index.js:269 component...

CVE-2024-36573

The almela obx library (versions prior to v.0.0.4 ) is vulnerable to a Prototype Pollution issue. The flaw originates from improper handling of JavaScript object prototypes within the index.js file, specifically affecting the reduce function at @almela/obx/build/index.js:470 and the Object.set co...

PT-2024-27081 · Alexbinary · Object-Deep-Assign

Name of the Vulnerable Software and Affected Versions: alexbinary object-deep-assign version 1.0.11 Description: The issue concerns a Prototype Pollution vulnerability via the extend method of Module.deepAssign, located in /src/index.js. Recommendations: For alexbinary object-deep-assign version...

@akbr/update Prototype Pollution

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36578

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36573: Improperly Controlled Modification of Object Prototype Attributes

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656, reduce @almela/obx/build/index.js:470, Object.set obx/build/index.js:269 component...

CVE-2024-36578: Improperly Controlled Modification of Object Prototype Attributes

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js...

CVE-2024-36574: Improperly Controlled Modification of Object Prototype Attributes

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

Prototype Pollution

@bit/loader is vulnerable to Prototype Pollution. The vulnerability is due to missing proto property restrictions within the M function's e argument in index.js, which allows an attacker to execute arbitrary code...

GHSA-8VR4-H4RR-8PH6 MiguelCastillo @bit/loader Prototype Pollution issue

A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js...