Prototype Pollution

@agreejs/shared is vulnerable to Prototype Pollution. The vulnerability is due to missing checks in the mergeInternalComponents function, allowing attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28327 · Agreejs · Agreejs

Name of the Vulnerable Software and Affected Versions: agreejs shared version 0.0.1 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the mergeInternalComponents...

CVE-2024-39017: Improper Control of Generation of Code

agreejs shared v0.0.1 was discovered to contain a prototype pollution via the function mergeInternalComponents. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...