EUVD-2021-0778

Malware in sbrugna...

Prototype Pollution

Overview Prototype pollution vulnerability in set-or-get version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution. Recommendation Upgrade to version 1.2.11 or later References - CVE - WhiteSource Advisory...

GHSA-6RV4-4QV6-88G2 Prototype Pollution in set-or-get

Prototype pollution vulnerability in ‘set-or-get’ version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25913

The CVE-2021-25913 entry involves a prototype pollution vulnerability in the set-or-get npm package (versions 1.0.0–1.2.10). The underlying flaw allows an attacker to pollute JavaScript object prototypes, potentially causing a denial of service and, in some cases, remote code execution. A fix is ...

PT-2021-16843 · Unknown · Set-Or-Get

Name of the Vulnerable Software and Affected Versions: set-or-get versions 1.0.0 through 1.2.10 Description: The issue is a prototype pollution vulnerability that allows an attacker to cause a denial of service and may lead to remote code execution. Recommendations: For versions 1.0.0 through...

set-or-get security breach

set-or-get is an open source package. It is used to set or get object field values. A security vulnerability in set-or-get versions 1.0.0 through 1.2.10 allows attackers to trigger a denial of service and potentially lead to remote code execution...

CVE-2021-25913: Improperly Controlled Modification of Object Prototype Attributes

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...