GHSA-WHPX-G542-7C7V @cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

@cat5th/key-serializer Prototype Pollution vulnerability

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

key-serializer security vulnerability

key-serializer is a library by Harvey Woo Personal Developer. It is used to serialize keys and query keys deep within objects. A security vulnerability exists in key-serializer version 0.2.5, which stems from a function containing prototype contamination that allows an attacker to execute arbitra...

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39018

The harvey-woo cat5th/key-serializer library, specifically version v0.2.5 , contains a prototype pollution vulnerability. The root cause is identified in functions such as query , set , default.query , and default.set , where passing crafted arguments with the proto property allows an attacker to...

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2024-28328

Name of the Vulnerable Software and Affected Versions harvey-woo cat5th/key-serializer version 0.2.5 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through the function "query". This is a result of prototype...

CVE-2024-39018: Improperly Controlled Modification of Object Prototype Attributes

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-39018

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Malicious code in adequate-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6513 Malicious code in adequate-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in activerecord-msgpack-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6471 Malicious code in activerecord-msgpack-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6441 Malicious code in active-serializer (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in active-model_serializer_plus (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in message-serializer (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5358 Malicious code in message-serializer (PyPI)

--- -= Per source details. Do not edit below this line.=-...

XML External Entity (XXE) Injection

symfony/serializer is vulnerable to XML External Entity XXE injection. This vulnerability is due to the failure to disable external entities when parsing XML using the XMLEncoder component, which allows an attacker to include arbitrary files from the file system by exploiting the XXE injection fl...