CLSA-2026-1778163112 Update of cups

Merge of the Amazon Linux 2 cups package cups-1.6.3-51.amzn2.0.9...

CLSA-2026-1778166693 Update of cups

Merge of the Amazon Linux 2 cups package cups-1.6.3-51.amzn2.0.9...

EUVD-2021-1010

Malware in sbrugna...

EUVD-2021-1982

Malware in sbrugna...

CVE-2021-23421

All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function...

Prototype Pollution in merge

All versions of package merge 2.1.1 are vulnerable to Prototype Pollution via recursiveMerge...

CVE-2020-28499

All versions of package merge are vulnerable to Prototype Pollution via recursiveMerge...

CVE-2020-28499

All versions of package merge are vulnerable to Prototype Pollution via recursiveMerge...

Design/Logic Flaw

All versions of package merge are vulnerable to Prototype Pollution via recursiveMerge...

CVE-2020-28499

CVE-2020-28499 affects the Node.js merge package. The vulnerability is a prototype pollution weakness in the _recursiveMerge function that exists in all versions before 2.1.1. Exploitation could allow an attacker to modify object prototypes, potentially leading to arbitrary code execution or mani...