18 matches found
EUVD-2022-1001
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-7751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pathval before version 1.1.1 is vulnerable to prototype pollution. CVE-2020-7751 Note that Nessus relies on the presence of the package as reported by the vendo...
@ckeditor/ckeditor5-dev-lint (>=1.0.0 <=2.0.3), @code_monk/hak-cli (>=1.0.6 <=1.0.9) +364 more potentially affected by CVE-2020-7751 via pathval (>=0.0.1 <=1.1.0)
pathval NPM version =0.0.1, =1.0.0, =1.0.6, =1.0.4, =2.0.3, =1.0.8, =1.0.3, =1.0.7, =2.0.3, =3.1.2, =1.0.3, =0.0.1, =0.1.0, =0.2.0 - @nwetzel/modern-web-dev-build =0.6.0 and more Source cves: CVE-2020-7751 Source advisory: OSV:GHSA-G6WW-V8XP-VMWG...
GHSA-G6WW-V8XP-VMWG Prototype pollution in pathval
A prototype pollution vulnerability affects all versions of package pathval under 1.1.1...
Prototype pollution in pathval
A prototype pollution vulnerability affects all versions of package pathval under 1.1.1...
Pathval Input Validation Error Vulnerability
pathval is an Npm codebase for retrieving and setting objects based on String strings from the Chai.js team. A security vulnerability exists in pathval. No vulnerability details are available at this time...
Prototype Pollution
pathval is vulnerable to prototype pollution. The function parsePath allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype...
DEBIAN-CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
UBUNTU-CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
Code injection
pathval before version 1.1.1 is vulnerable to prototype pollution...
CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
CVE-2020-7751 Prototype Pollution
pathval before version 1.1.1 is vulnerable to prototype pollution...
CVE-2020-7751
CVE-2020-7751 affects the pathval library (pathval before 1.1.1) and is a Prototype Pollution issue. The IBM bulletin list confirms the vulnerability in pathval with a base score of 6.0 and a CVSS v3.0 vector of CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H. Root cause is improper modification of ...
CVE-2020-7751
pathval before version 1.1.1 is vulnerable to prototype pollution...
Prototype Pollution
Overview pathval is an Object value retrieval given a string path Affected versions of this package are vulnerable to Prototype Pollution. PoC var pathval = require'pathval'; var obj = ; pathval.setPathValueobj, 'proto.polluted', true; console.logpolluted; // true Details Prototype Pollution is a...
config3 (=1.1.0) potentially affected by CVE-2020-7751 via pathval (=1.1.0)
pathval NPM version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pathval and may be impacted: - config3 =1.1.0 Source cves: CVE-2020-7751 Source advisory: SNYK:JS-PATHVAL-596926...