6 matches found
CVE-2022-21213
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...
Design/Logic Flaw
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...
CVE-2022-21213 Prototype Pollution
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...
CVE-2022-21213
This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn mixes objects into the target object, recursively mixing existing child objects as well. In both cases, the key used to access the target object recursively...
Prototype Pollution
mout is vulnerable to prototype pollution. An attacker is able to fill missing properties recursively via deepFillIn and mixes objects into the target existing child objects object recursively using deepMixIn as those functions do not validate the key to access the target object recursively...
ISC BIND Sensitive Information Disclosure Vulnerability
ISC BIND is the United States Internet Systems Consortium ISC company maintains a set of open source software that implements the DNS protocol. BIND suffers from a sensitive information disclosure vulnerability due to a flaw in BIND's recursive access control, which could be exploited by an...