Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2024/07/01 3:32 p.m.22 views

akbr patch-into was discovered to contain a prototype pollution via the function patchInto

akbr patch-into version 1.0.1 was discovered to contain a prototype pollution via the function patchInto. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.8CVSS9AI score0.00822EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/07/01 12:00 a.m.8 views

patch-into security holes

patch-into is a library by akbr individual developers. A security vulnerability exists in patch-into version v1.0.1, which originates from the inclusion of prototype contamination via the function patchInto, which allows attackers to execute arbitrary code or cause a denial of service DoS by...

8.8CVSS7.7AI score0.00822EPSS
SaveExploits0References2
Rows per page
Query Builder