EUVD-2021-1338

Malware in sbrugna...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype pollution in nconf-toml

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

@buckeye/bs-layered-config (>=1.0.0 <=1.2.0), reason-nconf (>=1.2.0 <=1.3.2) potentially affected by CVE-2021-25946 via nconf-toml (=0.0.2)

nconf-toml NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on nconf-toml and may be impacted: - @buckeye/bs-layered-config =1.0.0, =1.2.0, =1.3.2 Source cves: CVE-2021-25946 Source advisory: OSV:GHSA-HX7J-43W2-7RJ7...

GHSA-HX7J-43W2-7RJ7 Prototype pollution in nconf-toml

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

nconf-toml is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25946

CVE-2021-25946 affects the npm package nconf-toml . Vulnerable versions are 0.0.1 through 0.0.2 and the root cause is a prototype pollution flaw in the module, which can allow an attacker to modify object prototypes. The practical impact, as documented, includes a potential denial of service and ...

CVE-2021-25946

Prototype pollution vulnerability in nconf-toml versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...

nconf-toml 安全漏洞

nconf is a plugin in TOML format. A security vulnerability exists in nconf-toml versions 0.0.1 through 0.0.2, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

PT-2021-16872 · Unknown · Nconf-Toml

Name of the Vulnerable Software and Affected Versions: nconf-toml versions 0.0.1 through 0.0.2 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations: For versions 0.0.1 through 0.0.2...