Astra Linux – Vulnerability in dojo

All versions of the dojo package are vulnerable to Prototype Pollution through the setObject function...

EUVD-2022-0644

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-23450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - All versions of package dojo are vulnerable to Prototype Pollution via the setObject function. CVE-2021-23450 Note that Nessus relies on the presence of the...

HTTP Response Splitting

netty-codec-http is vulnerable to HTTP response splitting attack. The vulnerability exists in the setObject function of DefaultHeaders.java as it takes the arrays and iterators as arguments, providing a way to bypass value validation allowing an attacker to inject malicious header values into the...

The vulnerability of the setObject function in the dojo library, allowing a hacker to execute arbitrary code

The vulnerability of the setObject function in the dojo library is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GHSA-M8GW-HJPR-RJV7 Prototype Pollution in dojo

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

Prototype Pollution in dojo

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

DEBIAN-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

UBUNTU-CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

CVE-2021-23450

CVE-2021-23450 describes a Prototype Pollution vulnerability in the Dojo package, exposed via the setObject function. Multiple connected advisories confirm Dojo is affected and note remediation by upgrading to fixed Dojo versions in vendor advisories (IBM, other vendors) and related security bull...

CVE-2021-23450 Prototype Pollution

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function...

PT-2021-7298 · Dojo +3 · Dojo +3

Name of the Vulnerable Software and Affected Versions: dojo versions all Description: The issue is related to the incorrect management of code generation in the dojo library's setObject function. This can allow a remote attacker to execute arbitrary code. The vulnerability is associated with...

dojo 安全漏洞

dojo is a JavaScript toolkit that contains utilities, UI components, and more. A security vulnerability exists in dojo that stems from the software's susceptibility to Prototype contamination via the setObject function...

Prototype Pollution

Overview dojo is a foundation package for the Dojo 1 Toolkit. While still being maintained, new development is primarily focused on modern Dojo. Affected versions of this package are vulnerable to Prototype Pollution via the setObject function. PoC 1. Install dojo by running npm i dojo. 2. Create...