UBUNTU-CVE-2022-32205

A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl 7.84.0 stores all of them. A sufficiently large amount of big cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger th...

CVE-2022-32205

A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl and curl 7.84.0 stores all of them. A sufficiently large amount of big cookies make subsequent HTTP requests to this, or other servers to which the cookies match, create requests that become larger th...

PT-2022-21151

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.84.0 Description A malicious server can serve excessive amounts of Set-Cookie: headers in a HTTP response to curl. This can cause subsequent HTTP requests to become larger than the internal threshold of 1048576 bytes,...

Prototype Pollution in deep-get-set

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: OSV:GHSA-MJJJ-6P43-VHHV...

GHSA-MJJJ-6P43-VHHV Prototype Pollution in deep-get-set

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2022-21231 via deep-get-set (1.1.1)

deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2022-21231 Source advisory: GHSA-MJJJ-6P43-VHHV...

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

Design/Logic Flaw

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

CVE-2022-21231 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

CVE-2022-21231

CVE-2022-21231 affects the deep-get-set package; all versions are vulnerable to prototype pollution via the deep function. The vulnerability stems from an incomplete fix of CVE-2020-7715. The available references describe the issue as a prototype pollution risk that could allow modification of Ob...

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of "CVE-2020-7715" https://security.snyk.io/vuln/SNYK-JS-DEEPGETSET-598666...

CVE-2022-21231

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

PT-2022-14940

Name of the Vulnerable Software and Affected Versions deep-get-set versions prior to the version with a complete fix for the issue Description The issue is related to Prototype Pollution via the deep function in the deep-get-set package. This problem arises from an incomplete fix of a previous...

deep-get-set security vulnerability

deep-get-set is used to set and obtain values on objects via dotted strings. deep-get-set package in all versions suffers from a prototype pollution vulnerability that stems from the vulnerability of products to uncontrolled modification of object prototype properties. An attacker could exploit...

CVE-2022-21231: Improperly Controlled Modification of Object Prototype Attributes

All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

June 23, 2022—KB5014665 OS Build 20348.803 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. No...

MAL-2022-7053 Malicious code in wbtc-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a29f028b12bcfc56fb614b602c2a87e6aa9759e8cb9367ee05967ab3d8f696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wbtc-address-set-adapter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wbtc-address-set-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7a29f028b12bcfc56fb614b602c2a87e6aa9759e8cb9367ee05967ab3d8f696 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...