5 matches found
CVE-2024-57069: Improperly Controlled Modification of Object Prototype Attributes
A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
PT-2025-5763
Name of the Vulnerable Software and Affected Versions: php-date-formatter version 1.3.6 Description: A prototype pollution in the lib function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For php-date-formatter version 1.3.6, consider disabli...
PT-2025-5769 · Unknown · Expand-Object
Name of the Vulnerable Software and Affected Versions: expand-object version 0.4.2 Description: A prototype pollution in the lib function of expand-object allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For expand-object version 0.4.2, consider...
expand-object 安全漏洞
expand-object is a library by Jon Schlinkert, a personal developer, that uses simple symbols to expand strings into JavaScript objects. A security vulnerability exists in expand-object version v0.4.2, which stems from the lib function containing a prototype contamination vulnerability...
UBUNTU-CVE-2020-35132
An XSS issue has been discovered in phpLDAPadmin before 1.2.6.2 that allows users to store malicious values that may be executed by other users at a later time via getrequest in lib/function.php...