8 matches found
CVE-2019-25084 Hide Files on GitHub options.js addEventListener cross site scripting
A vulnerability, which was classified as problematic, has been found in Hide Files on GitHub up to 2.x. This issue affects the function addEventListener of the file extension/options.js. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 3.0...
Hide Files on GitHub 跨站脚本漏洞
Hide Files on GitHub is a Chrome extension by Sindre Sorhus Personal Developer. Hide unimportant files in the GitHub file browser. A cross-site scripting vulnerability exists in Hide Files on GitHub versions prior to 3.0.0, which stems from an issue with the file extension/options.js function...
Prototype Pollution
js-beautify is vulnerable to prototype pollution. An attacker is able to pollute any future object creations by passing a crafted malicious payload to mergeOpts function in options.js via the name variable...
CVE-2022-37609
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...
CVE-2022-37609
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...
CVE-2022-37609
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...
UBUNTU-CVE-2022-37609
Prototype pollution vulnerability in beautify-web js-beautify 1.13.7 via the name variable in options.js...
CVE-2022-37609
CVE-2022-37609 affects the Node.js/js-beautify component in beautify-web, specifically version 1.13.7, due to a prototype pollution flaw in options.js via the name variable. Multiple sources corroborate a high-severity (CVSS v3.1: 9.8) exposure with network attack vector, no user interaction, and...