Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/29 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-57352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS...

5.3CVSS6.1AI score0.00164EPSS
Exploits0References3
Snyk
Snyk
added 2025/09/24 6:43 p.m.1 views

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution via the removeAttributeNS function. An attacker can manipulate the prototype chain of JavaScript objects, potentially causing a denial-of-service attack by supplying malicious input that targets the proto property...

6.3CVSS7.8AI score0.00164EPSS
Exploits0References2
Snyk
Snyk
added 2025/09/24 6:43 p.m.1 views

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution via the removeAttributeNS function. An attacker can manipulate the prototype chain of JavaScript objects, potentially causing a denial-of-service attack by supplying malicious input that targets the proto property...

6.3CVSS7.3AI score0.00164EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/09/24 6:30 p.m.4 views

min-document vulnerable to prototype pollution

A vulnerability exists in the 'min-document' package prior to version 2.19.1, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

5.3CVSS7.5AI score0.00164EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/09/24 6:30 p.m.1 views

GHSA-RX8G-88G5-QH64 min-document vulnerable to prototype pollution

A vulnerability exists in the 'min-document' package prior to version 2.19.1, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

6.3CVSS7AI score0.00164EPSS
Exploits0References6
OSV
OSV
added 2025/09/24 6:15 p.m.1 views

CVE-2025-57352

A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

5.3CVSS6AI score0.00164EPSS
Exploits0References2
OSV
OSV
added 2025/09/24 6:15 p.m.1 views

DEBIAN-CVE-2025-57352

A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

5.3CVSS5.9AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2025/09/24 6:15 p.m.0 views

UBUNTU-CVE-2025-57352

A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

5.3CVSS7.4AI score0.00164EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/24 12:0 a.m.2 views

min-document 安全漏洞

min-document is a software library from the individual developer Jake Verbaten. A security vulnerability exists in min-document versions prior to 2.19.0, which stems from mishandling of namespace operations in the removeAttributeNS method, which could result in a denial of service or execution of...

5.3CVSS6.7AI score0.00164EPSS
Exploits0References2
CVE
CVE
added 2025/09/24 12:0 a.m.17 views

CVE-2025-57352

CVE-2025-57352 affects the min-document package prior to 2.19.0 and is a prototype pollution issue via removeAttributeNS, triggered by input involving proto . IBM confirms affected products in connected bulletins: IBM Business Automation Workflow (containers and traditional), IBM Concert Software...

5.3CVSS7.4AI score0.00164EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/24 12:0 a.m.2 views

CVE-2025-57352

A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the proto property, an attacker can manipulate the prototype chain of JavaScript objects,...

7.4AI score0.00164EPSS
Exploits0References2
Rows per page
Query Builder