Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2025/05/27 3:3 p.m.19 views

radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Impact This is a prototype pollution vulnerability. It impacts users of the set function within the Radashi library. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScript runtime, leading to unexpect...

8.8CVSS7.8AI score0.00557EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/05/27 3:3 p.m.10 views

GHSA-2XV9-GHH9-XC69 radashi Allows Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Impact This is a prototype pollution vulnerability. It impacts users of the set function within the Radashi library. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScript runtime, leading to unexpect...

8.8CVSS8.1AI score0.00557EPSS
SaveExploits0References4
NVD
NVD
added 2025/05/27 5:15 a.m.18 views

CVE-2025-48054

Radashi is a TypeScript utility toolkit. Prior to version 12.5.1, the set function within the Radashi library is vulnerable to prototype pollution. If an attacker can control parts of the path argument to the set function, they could potentially modify the prototype of all objects in the JavaScri...

8.8CVSS0.00557EPSS
SaveExploits0References2
Rows per page
Query Builder