Arbitrary Code Execution

@thi.ng/paths is vulnerable to arbitrary code execution. The vulnerability is due to improper control of dynamically-managed code resources due to the handling of object properties in the mutIn and mutInManyUnsafe methods...

GHSA-8PPR-WWW8-HFJX @thi.ng/paths Prototype Pollution vulnerability

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

@thi.ng/paths Prototype Pollution vulnerability

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

Thi.ng Paths security vulnerabilities

thi.ng paths is a path-based object property/array accessor with struct-shared immutable, optimized and optional types. A security vulnerability exists in thi.ng paths version v.5.1.62 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code via the mutIn and...

CVE-2024-29650

The @thi.ng/paths library (version v.5.1.62 and before ) is vulnerable to arbitrary code execution due to a Prototype Pollution flaw (CWE-1321). The root cause involves improper control of dynamically-managed code resources during the handling of object properties in the mutIn and mutInManyUnsafe...

PT-2024-22950

Name of the Vulnerable Software and Affected Versions @thi.ng/paths versions 5.1.62 and earlier Description An issue in the software allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components. This enables the attacker to perform unauthorized actions on the...

CVE-2024-29650: Improperly Controlled Modification of Object Prototype Attributes

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

Prototype Pollution in thi-ng/umbrella

Description @thi.ng/paths is vulnerable to Prototype Pollution. The vulnerability is due to an incomplete fix. mutIn function does not have fix implemented. Proof of Concept 1. Create the following PoC file: javascript // poc.js const paths = require'@thi.ng/paths' console.log"Before: ", .pollute...