4 matches found
PT-2026-53025
Name of the Vulnerable Software and Affected Versions js-toml versions prior to 1.1.2 Description The interpreter incorrectly verifies if a key already exists in a parser-built container by using if objectkey instead of if key in object. When a key is assigned a falsy primitive value—such as fals...
Prototype Pollution in cached-path-relative
The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...
PT-2022-9406 · Unknown · Cached-Path-Relative
Name of the Vulnerable Software and Affected Versions: cached-path-relative versions prior to 1.1.0 Description: The issue allows for Prototype Pollution via the cache variable set as instead of Object.createnull in the cachedPathRelative function. This enables access to parent prototype properti...
Linux virtio_gpu_object_create Buffer Overflow DoS
The vulnerability of the virtiogpuobjectcreate function in the Linux operating system is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure memory consumption by triggering an initialization error...