EUVD-2021-0737

Malware in sbrugna...

GHSA-2F6G-W5GJ-C93H Prototype Pollution in iniparserjs

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Prototype Pollution in iniparserjs

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Prototype Pollution

iniparserjs is vulnerable to prototype pollution. An attacker can inject arbitrary properties into existing construct prototypes via concatenation of array in iniparser.js to modify attributes such as proto, constructor and prototype...

Design/Logic Flaw

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

CVE-2021-23328

CVE-2021-23328 affects iniparserjs. The connected documents describe a Prototype Pollution vulnerability arising when ini_parser.js concentrates arrays, allowing an attacker to overwrite/pollute the Object.prototype based on user input. This affects all versions of the package per the CVE entry, ...

CVE-2021-23328 Prototype Pollution

This affects all versions of package iniparserjs. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program...

Prototype Pollution

Overview iniparserjs is an ini style file parser for node Affected versions of this package are vulnerable to Prototype Pollution. This vulnerability relates when iniparser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototy...

iniparserjs Security Vulnerability

Tensoar IniParser is a Javascript-based codebase for parsing Ini files from the individual developers at Tensoar. A security vulnerability exists in all versions of iniparserjs, which can be exploited by an attacker to overwrite and contaminate a program's object prototypes...