465 matches found
@cat5th/key-serializer Prototype Pollution vulnerability
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
key-serializer security vulnerability
key-serializer is a library by Harvey Woo Personal Developer. It is used to serialize keys and query keys deep within objects. A security vulnerability exists in key-serializer version 0.2.5, which stems from a function containing prototype contamination that allows an attacker to execute arbitra...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
CVE-2024-39018 affects harvey-woo cat5th/key-serializer v0.2.5. The root cause is a prototype pollution flaw in the query function, enabling attackers to inject properties and potentially execute arbitrary code or cause a Denial of Service. Multiple sources (NVD, Red Hat, Veracode, GHSA, osv, CVE...
Malicious code in adequate-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6513 Malicious code in adequate-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in activerecord-msgpack-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6471 Malicious code in activerecord-msgpack-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6441 Malicious code in active-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-model_serializer_plus (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in message-serializer (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5358 Malicious code in message-serializer (PyPI)
--- -= Per source details. Do not edit below this line.=-...
XML External Entity (XXE) Injection
symfony/serializer is vulnerable to XML External Entity XXE injection. This vulnerability is due to the failure to disable external entities when parsing XML using the XMLEncoder component, which allows an attacker to include arbitrary files from the file system by exploiting the XXE injection fl...
Fedora: Security Advisory for rust-pythonize (FEDORA-2024-d408b654d6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-pythonize (FEDORA-2024-3ff83cb806)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
