Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/12/19 3:30 p.m.24 views

FurqanSoftware/node-whois vulnerable to Prototype Pollution

A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to launch the attack remotely. Th...

9.8CVSS9.1AI score0.00943EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
added 2022/12/19 12:0 a.m.5 views

Node WHOIS 安全漏洞

Node WHOIS is an open source WHOIS client for Node.js by Furqan Software. Node WHOIS has a security vulnerability that stems from a problem with an unknown function in the file index.coffee, which can lead to improperly controlled modifications of object prototype properties, resulting in prototy...

9.8CVSS8.1AI score0.00943EPSS
SaveExploits1References4
Rows per page
Query Builder