EUVD-2021-1084

Malware in sbrugna...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: OSV:GHSA-GR58-J5WH-M333...

Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

GHSA-GR58-J5WH-M333 Prototype Pollution in nis-utils

All versions of package nis-utils up to and including 0.6.10 are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

Design/Logic Flaw

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703 Prototype Pollution

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703

CVE-2020-7703 affects nis-utils. Vulnerability: Prototype Pollution via the setValue function in all versions up to 0.6.10. Root cause: unsafe handling of input in setValue enabling modification of Object.prototype. Impact: high to critical potential (as per CVSS in sources) including potential D...

Prototype Pollution

Overview nis-utils is a set of useful helpers Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const nisUtils = require'nis-utils'; nisUtils.object.setValue, 'proto.polluted', true; console.logpolluted; Details Prototype Pollution is a...

nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)

nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: SNYK:JS-NISUTILS-598799...

PT-2020-19726 · Nis-Utils · Nis-Utils

Name of the Vulnerable Software and Affected Versions: nis-utils versions up to and including 0.6.10 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions of the package up to and including 0.6.10. Recommendations: For versions up to and includin...