EUVD-2022-1956

Malicious code in bioql PyPI...

GHSA-2C29-WC65-4CX9 linux-cmdline is vulnerable to Prototype Pollution via the constructor

The package linux-cmdline is a parser for Linux kernel command line arguments. Versions before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

grub2 buffer overflow vulnerability (CNVD-2021-16927)

grub2 is a Linux system boot program from the GNU community. A security vulnerability exists in grub2 versions prior to 2.06 which identifies a stack buffer overflow vulnerability in grubparsersplitcmdline. No details of the vulnerability are provided at this time...

Prototype Pollution

linux-cmdline is vulnerable to prototype pollution. The vulnerability exists as it was possible to include the proto header in the constructor...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

Code injection

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

CVE-2020-7704

The Linux cmdline package (linux-cmdline) is affected by CVE-2020-7704. Versions prior to 1.0.1 are vulnerable to Prototype Pollution via the constructor in its parser for Linux kernel command line arguments. The underlying issue enables pollution of Object.prototype, with potential consequences ...

CVE-2020-7704 Prototype Pollution

The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor...

PT-2020-19727 · Linux · Linux-Cmdline

Name of the Vulnerable Software and Affected Versions: linux-cmdline versions prior to 1.0.1 Description: The issue concerns Prototype Pollution via the constructor in a package that parses Linux kernel command line arguments. Recommendations: For versions prior to 1.0.1, update to version 1.0.1 ...

Prototype Pollution

Overview linux-cmdline is a Parser for the Linux kernel command line arguments Affected versions of this package are vulnerable to Prototype Pollution via the constructor. POC: const linuxCmdline = require'linux-cmdline'; linuxCmdline'proto.polluted=true'; console.logpolluted; Details Prototype...