7367 matches found
@astar-network/swanky-cli (>=2.2.0-alpha.0, <=2.2.3), @neon.id/uji-grader (>=1.0.0, <=1.2.0) +1 more potentially affected by CVE-2025-54803 via js-toml (>=0.1.1, <=1.0.0)
js-toml NPM version =0.1.1, =2.2.0-alpha.0, =1.0.0, =1.0.0, =1.2.0 Source cves: CVE-2025-54803 Source advisory: MEND:CVE-2025-54803...
CVE-2025-54803
CVE-2025-54803 affects the JavaScript TOML parser js-toml . Vulnerable versions are those below 1.0.2 , where parsing a specially crafted TOML input can enable a prototype pollution attack that allows an attacker to add or modify properties on the global Object.prototype . The impact can range fr...
CVE-2025-54803 js-toml is vulnerable to Prototype Pollution
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...
CVE-2025-54803
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...
NanoVault security vulnerabilities
NanoVault is an open source wallet software using Nano cryptocurrency by Andrew Steele, an individual developer. A security vulnerability exists in NanoVault 1.2.1 and earlier versions, which stems from a cross-site scripting vulnerability in the function executeJavaScript in file/main.js...
js-toml security vulnerabilities
js-toml is a TOML parser for JavaScript by Sunny Personal Developer. A security vulnerability exists in versions of js-toml prior to 1.0.2, which stems from a prototype contamination vulnerability that could lead to modification of the global Object.prototype property...
CVE-2025-54803: Improperly Controlled Modification of Object Prototype Attributes
js-toml is a TOML parser for JavaScript, fully compliant with the TOML 1.0.0 Spec. In versions below 1.0.2, a prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This is fixed...
CVE-2025-50592: Improper Neutralization of Input During Web Page Generation
Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...
CVE-2025-50592
The seacms web content management system, specifically versions prior to 13.2 , is vulnerable to a Cross-Site Scripting (XSS) issue. The vulnerability is located in the vid parameter within the path Upload/js/player/dmplayer/player. This flaw is caused by the improper neutralization of input duri...
barrelly (>=1.0.0, <=1.2.0) potentially affected by CVE-2025-54803 via js-toml (1.0.0)
js-toml NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on js-toml and may be impacted: - barrelly =1.0.0, =1.2.0 Source cves: CVE-2025-54803 Source advisory: OSV:GHSA-65FC-CR5F-V7R2...
barrelly (>=1.0.0, <=1.2.0) potentially affected by CVE-2025-54803 via js-toml (1.0.0)
js-toml NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on js-toml and may be impacted: - barrelly =1.0.0, =1.2.0 Source cves: CVE-2025-54803 Source advisory: GHSA-65FC-CR5F-V7R2...
GHSA-65FC-CR5F-V7R2 js-toml Prototype Pollution Vulnerability
A prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. Impact The js-toml library is vulnerable to Prototype Pollution. When parsing a TOML string containing the specially...
js-toml Prototype Pollution Vulnerability
A prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. Impact The js-toml library is vulnerable to Prototype Pollution. When parsing a TOML string containing the specially...
PT-2025-31886
Name of the Vulnerable Software and Affected Versions js-toml versions prior to 1.0.2 Description A prototype pollution vulnerability in js-toml allows a remote attacker to add or modify properties of the global Object.prototype by parsing a maliciously crafted TOML input. This can lead to severe...
CVE-2025-54789: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, which can lead to Browser JS code execution in the context of the user’s session. This is fixed i...
CVE-2025-54789
Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, which can lead to Browser JS code execution in the context of the user’s session. This is fixed i...
Malicious code in tensor-nft-js (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6661 Malicious code in tensor-nft-js (npm)
--- -= Per source details. Do not edit below this line.=-...