543 matches found
Prototype Pollution
@cat5th/key-serializer is vulnerable to Prototype Pollution. The vulnerability is due to passing crafted arguments with the proto property using functions like query, set, default.query, and default.set. The vulnerability allows attackers to alter the behavior of all objects inheriting from the...
@cat5th/key-serializer Prototype Pollution vulnerability
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
key-serializer security vulnerability
key-serializer is a library by Harvey Woo Personal Developer. It is used to serialize keys and query keys deep within objects. A security vulnerability exists in key-serializer version 0.2.5, which stems from a function containing prototype contamination that allows an attacker to execute arbitra...
CVE-2024-39018: Improperly Controlled Modification of Object Prototype Attributes
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
The harvey-woo cat5th/key-serializer library, specifically version v0.2.5 , contains a prototype pollution vulnerability. The root cause is identified in functions such as query , set , default.query , and default.set , where passing crafted arguments with the proto property allows an attacker to...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-39018
harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Malicious code in adequate-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6513 Malicious code in adequate-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in activerecord-msgpack-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6471 Malicious code in activerecord-msgpack-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6441 Malicious code in active-serializer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in active-model_serializer_plus (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in message-serializer (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5358 Malicious code in message-serializer (PyPI)
--- -= Per source details. Do not edit below this line.=-...
XML External Entity (XXE) Injection
symfony/serializer is vulnerable to XML External Entity XXE injection. This vulnerability is due to the failure to disable external entities when parsing XML using the XMLEncoder component, which allows an attacker to include arbitrary files from the file system by exploiting the XXE injection fl...
Fedora: Security Advisory for rust-pythonize (FEDORA-2024-3ff83cb806)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...