Prototype Pollution

Overview @rvf/set-get is an Internal utilities and types for working with deeply nested data. This is primarily used internally by RVF and it's various packages. It isn't recommended for use by most people. Affected versions of this package are vulnerable to Prototype Pollution via the setPath...

jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()

...

EUVD-2007-2840

Malware in sbrugna...

EUVD-2021-1109

Malware in sbrugna...

The vulnerability of the setPath() function in the PHP Spreadsheet library, which allows an attacker to perform an SSRF attack

The vulnerability of the setPath function in the PHP Spreadsheet library is related to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

GHSA-J4RW-X3VG-C8R7 Prototype Pollution in node-oojs

All versions of package node-oojs up to and including version 1.4.0 are vulnerable to Prototype Pollution via the setPath function...

Prototype Pollution

node-oojs is vulnerable to prototype pollution. The vulnerability exists as the setPath function does not restrict proto headers to be set in objects...

CVE-2020-7721

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function...

CVE-2020-7721 Prototype Pollution

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function...

PT-2020-6071

Name of the Vulnerable Software and Affected Versions node-forge versions prior to 0.10.0 Description The issue is related to Prototype Pollution via the util.setPath function. This can allow a remote attacker to implement a prototype pollution attack by modifying object attributes uncontrollably...

PT-2020-19742 · Npm · Node-Oojs

Name of the Vulnerable Software and Affected Versions: node-oojs versions prior to 1.4.1 Description: The issue concerns Prototype Pollution via the setPath function. This allows for potential manipulation of object properties, which could lead to various security issues. Recommendations: For...

CVE-2020-7721: Improperly Controlled Modification of Object Prototype Attributes

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function...

CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-2848

Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control shcmb80.ocx in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely...