MAL-2024-2442 Malicious code in gtm-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discord.js-invites (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1958 Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in cc-libraries-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1700 Malicious code in 33-js-concepts (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-1983 Malicious code in @store-sfdcbt-net/cicd_gulp-central-js-lib-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2490 Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @hweb/hua-js (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2033 Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ably-forks/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=-...

AZL-45066 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

GHSA-QJ86-V6M7-4QV2 Object Resolver Prototype Pollution

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

Object Resolver Prototype Pollution

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

CVE-2024-36577

apphp js-object-resolver 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty...

PT-2024-27076 · Unknown · Js-Object-Resolver

Name of the Vulnerable Software and Affected Versions: js-object-resolver versions prior to 3.1.1 Description: The issue allows for Prototype Pollution via the setNestedProperty function of the Module. This can potentially lead to unintended behavior or security issues. Recommendations: For...

CVE-2024-36577

The vulnerability affects apphp/js-object-resolver prior to version 3.1.1. It enables Prototype Pollution via Module.setNestedProperty, potentially allowing an attacker to modify object properties and, per Veracode, potentially execute arbitrary code. Remediation: upgrade to 3.1.1 or later.

The vulnerability of the isPublic() function in the node-ip utility of the Node.js software platform allows a attacker to execute an SSRF attack.

The vulnerability of the isPublic function in the node-ip utility of the Node.js software platform is related to incorrect classification of IP addresses. Exploiting this vulnerability could allow a remote attacker to execute an SSRF attack...

CVE-2024-36233 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier Answer: are affected by a DOM-based Cross-Site Scripting XSS vulnerability. This vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser session. Exploitation of this issue typically...

CVE-2024-36221 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...