Arbitrary Code Execution

@thi.ng/paths is vulnerable to arbitrary code execution. The vulnerability is due to improper control of dynamically-managed code resources due to the handling of object properties in the mutIn and mutInManyUnsafe methods...

@thi.ng/paths Prototype Pollution vulnerability

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

GHSA-8PPR-WWW8-HFJX @thi.ng/paths Prototype Pollution vulnerability

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

CVE-2024-29650

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components...

thi.ng paths 安全漏洞

thi.ng paths is a path-based object property/array accessor with struct-shared immutable, optimized and optional types. A security vulnerability exists in thi.ng paths version v.5.1.62 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code via the mutIn and...

CVE-2024-29650

CVE-2024-29650 affects @thi.ng/paths versions 5.1.62 and earlier. Public sources describe a remote code execution vulnerability via the mutIn and mutInManyUnsafe components, tied to how object properties/dynamic code resources are handled. The impact is described as remote, with no user interacti...

PT-2024-22950

Name of the Vulnerable Software and Affected Versions @thi.ng/paths versions 5.1.62 and earlier Description An issue in the software allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components. This enables the attacker to perform unauthorized actions on the...

Prototype Pollution in thi-ng/umbrella

Description @thi.ng/paths is vulnerable to Prototype Pollution. The vulnerability is due to an incomplete fix. mutIn function does not have fix implemented. Proof of Concept 1. Create the following PoC file: javascript // poc.js const paths = require'@thi.ng/paths' console.log"Before: ", .pollute...