flatten-json Prototype Pollution

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON flatten-json/index.js:42...

PT-2023-20507 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: n158 versions all Description: The issue arises from improper input sanitization in the module.exports function, leading to Command Injection. To potentially exploit this, an attacker must have the ability to run Node.js code within the targe...

Remote Code Execution

morgan-json is vulnerable to remote code execution. The vulnerability exists due to the missing sanitizations of user input passed to the module.exports function, which allows remote attackers to inject and execute malicious code...