Google Firebase Js Sdk prototype contamination vulnerability

Google Firebase Js Sdk is a client-side code base for connecting to the Firebase backend service from Google. firebase/util versions prior to 0.3.4 contain a prototype contamination vulnerability that originates from the deepExtend function in DeepCopy.ts. An attacker could exploit this...

Debian: Security Advisory (DSA-4789-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4789-1 : codemirror-js - security update

It was discovered that codemirror, a browser-based text editor implemented in JavaScript, was vulnerable to regular expression denial-of-service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4789. The text...

Prototype Pollution in json-logic-js

Versions of json-logic-js prior to 2.0.0 are vulnerable to Prototype Pollution. The method operation allows a malicious user to modify the prototype of Object through the method property name. This causes modification of any existing property that will exist on all objects and leads to Remote Cod...

GHSA-M9HW-7XFV-WQG7 Prototype Pollution in json-logic-js

Versions of json-logic-js prior to 2.0.0 are vulnerable to Prototype Pollution. The method operation allows a malicious user to modify the prototype of Object through the method property name. This causes modification of any existing property that will exist on all objects and leads to Remote Cod...

[SECURITY] [DSA 4789-1] codemirror-js security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 12, 2020 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4789-1] codemirror-js security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond November 12, 2020 https://www.debian.org/security/faq -...

PT-2020-21399

Name of the Vulnerable Software and Affected Versions json-logic-js versions prior to 2.0.0 Description The issue allows a malicious user to modify the prototype of Object through the method property name in the operation method. This can lead to modification of any existing property that will...

DSA-4789-1 codemirror-js - security update

Bulletin has no description...

CVE-2020-7768

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition...

Design/Logic Flaw

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition...

CVE-2020-7768

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition...

CVE-2020-7768 Prototype Pollution

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition...

@1amageek/tradable (>=0.8.0, <=0.9.0), @3wks/gae-node-nestjs (>=1.3.4, <=6.0.0-rc.0) +705 more potentially affected by CVE-2020-7768 via @grpc/grpc-js (>=0.1.0, <=1.1.7)

@grpc/grpc-js NPM version =0.1.0, =0.8.0, =1.3.4, =1.0.0, =0.0.1, =1.0.0-master.1, =1.0.1, =0.0.3, =0.0.1, =0.0.2, =2.0.16, =2.6.0-next.4, =2.1.0-alpha.0, =3.0.0 and more Source cves: CVE-2020-7768 Source advisory: MEND:CVE-2020-7768...

CVE-2020-7768: Improperly Controlled Modification of Object Prototype Attributes

The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition...

PT-2020-19780 · Grpc · Grpc +1

Name of the Vulnerable Software and Affected Versions: grpc versions prior to 1.24.4 @grpc/grpc-js versions prior to 1.1.8 Description: The issue concerns Prototype Pollution via loadPackageDefinition. This affects the grpc and @grpc/grpc-js packages. Recommendations: For grpc versions prior to...

ALEA-2020:4714 js-d3-flame-graph bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

js-d3-flame-graph bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

js-d3-flame-graph bug fix and enhancement update

An update is available for js-d3-flame-graph. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

idm:DL1 and idm:client security, bug fix, and enhancement update

An update is available for python-jwcrypto, custodia, python-qrcode, python-yubico, python-kdcproxy, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rocky...