EUVD-2022-6418

Malicious code in bioql PyPI...

GHSA-V42Q-78W8-8FCC set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373: Improperly Controlled Modification of Object Prototype Attributes

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

GHSA-W4WQ-RVMQ-77X7 Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

Cross-site scripting in anchorme

All versions of package anchorme are vulnerable to Cross-site Scripting XSS via the main functionality...

Command injection

All versions of package gitlogplus are vulnerable to Command Injection via the main functionality, as options attributes are appended to the command to be executed without sanitization...

CVE-2021-23402

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23402: Improperly Controlled Modification of Object Prototype Attributes

All versions of package record-like-deep-assign are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...

CVE-2020-28503: Undefined Security Weakness

The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality...