Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-2150

Malware in sbrugna...

9.8CVSS9.2AI score0.02811EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-1577

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00536EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 4:36 p.m.2 views

CVE-2020-28283

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.3AI score0.02811EPSS
Exploits1
Veracode
Veracode
added 2022/03/18 2:11 a.m.16 views

Prototype Pollution

libnested is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the set function in the index.js and modify attributes such as proto, constructor, and prototype...

9.8CVSS4.1AI score0.00536EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/03/18 12:1 a.m.16 views

GHSA-X5M8-2R8V-8F97 Prototype Pollution in libnested

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

9.8CVSS9.4AI score0.00536EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/03/18 12:1 a.m.25 views

Prototype Pollution in libnested

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

9.8CVSS3.9AI score0.00536EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2022/03/17 12:15 p.m.5 views

CVE-2022-25352

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

9.8CVSS0.00536EPSS
Exploits1References3
OSV
OSV
added 2022/03/17 12:15 p.m.9 views

CVE-2022-25352

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

9.8CVSS6.7AI score
Exploits0References3
CVE
CVE
added 2022/03/17 11:20 a.m.69 views

CVE-2022-25352

CVE-2022-25352 affects the libnested package prior to version 1.5.2. The vulnerability is a prototype pollution flaw in the set function of index.js, stemming from an incomplete fix related to CVE-2020-28283. Impact is described as prototype contamination with potential high-severity effects; aff...

9.8CVSS8.5AI score0.00536EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/03/17 11:20 a.m.14 views

CVE-2022-25352 Prototype Pollution

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

7.5CVSS9.8AI score0.00536EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/03/17 11:16 a.m.2 views

CVE-2022-25352

The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283...

9.8CVSS7.2AI score0.02811EPSS
Exploits2References4
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.1 views

Dominictarr Libnested 安全漏洞

Dominictarr Libnested is a codebase from the Dominictarr individual developer that provides map, each, get, set, keys functions for basic nested objects. A security vulnerability exists in Dominictarr Libnested, which stems from the set function in index.js being susceptible to prototype...

9.8CVSS8.2AI score0.00536EPSS
Exploits1References4
Snyk
Snyk
added 2022/01/17 11:49 a.m.1 views

Prototype Pollution

Overview libnested is a package with basic functions map, each, get, set, keys for nested objects. Affected versions of this package are vulnerable to Prototype Pollution via the set function in index.js. Note: This vulnerability derives from an incomplete fix for CVE-2020-28283 PoC: js const...

9.8CVSS9AI score0.02811EPSS
Exploits2References2
OSV
OSV
added 2021/10/12 4:27 p.m.12 views

GHSA-3R9X-MJRM-2725 Prototype pollution vulnerability in 'libnested'

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.4AI score0.02811EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/10/12 4:27 p.m.26 views

Prototype pollution vulnerability in 'libnested'

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.1AI score0.02811EPSS
Exploits1References4Affected Software1
Veracode
Veracode
added 2020/12/30 12:48 a.m.14 views

Denial Of Service (DoS)

libnested is vulnerable to denial of service. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype causing a denial of service and may lead to remote code execution...

9.8CVSS5.7AI score0.02811EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2020/12/29 6:15 p.m.8 views

CVE-2020-28283

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8AI score
Exploits0References2
Prion
Prion
added 2020/12/29 6:15 p.m.9 views

Remote code execution

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS9.4AI score0.02811EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2020/12/29 5:5 p.m.48 views

CVE-2020-28283

CVE-2020-28283 affects the libnested package; versions before 1.5.2 are vulnerable to Prototype Pollution through the set function in index.js, enabling denial of service and potentially remote code execution. The issue stems from an incomplete fix and is addressed by upgrading libnested to 1.5.2...

9.8CVSS9.4AI score0.02811EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/12/29 5:5 p.m.10 views

CVE-2020-28283

Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead to remote code execution...

8.8AI score0.02811EPSS
Exploits1References2
Rows per page
Query Builder