EUVD-2024-53525

Malicious code in bioql PyPI...

Prototype Pollution

@rpldy/uploader is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of user-supplied input in the lib.createUploader function, allowing attackers to manipulate object properties and cause a Denial of Service DoS attack via a crafted payload...

CVE-2024-57082

A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5758 · Npm · @Rpldy/Uploader

Name of the Vulnerable Software and Affected Versions: @rpldy/uploader version 1.8.1 Description: A prototype pollution in the lib.createUploader function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For @rpldy/uploader version 1.8.1, conside...

CVE-2024-57082

The CVE-2024-57082 entry concerns @rpldy/uploader v1.8.1, where the lib.createUploader function is susceptible to prototype pollution. The root cause is improper handling of user-supplied input, allowing crafted payloads to pollute object properties and trigger a Denial of Service (DoS). Impact s...