Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:2 a.m.2 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS6.2AI score0.00283EPSS
Exploits0References1
OSV
OSV
added 2024/07/01 3:32 p.m.5 views

GHSA-GH4X-QV3P-M9PM akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00283EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.13 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00283EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/07/01 1:15 p.m.7 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS0.00283EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.2 views

patch-into security holes

patch-into is a library by akbr individual developers. A security vulnerability exists in patch-into version v1.0.1, which originates from the inclusion of prototype contamination via the function patchInto, which allows attackers to execute arbitrary code or cause a denial of service DoS by...

8.8CVSS7.7AI score0.00283EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.10 views

CVE-2024-38991

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00283EPSS
Exploits0References1
GitLab Advisory Database
GitLab Advisory Database
added 2024/07/01 12:0 a.m.12 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into v1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS8.2AI score0.00283EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2024/07/01 12:0 a.m.40 views

CVE-2024-38991

CVE-2024-38991 affects the npm library akbr patch-into, version 1.0.1 . The root cause is a prototype pollution flaw in the function patchInto , which can allow an attacker to inject arbitrary properties. This leads to potential remote arbitrary code execution or Denial of Service (DoS) as descri...

8.8CVSS8.3AI score0.00283EPSS
Exploits0References1
Rows per page
Query Builder