Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2025/09/24 9:30 p.m.13 views

spmrc vulnerable to prototype pollution

spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...

7.5CVSS6.7AI score0.00392EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/09/24 9:30 p.m.10 views

GHSA-R2RV-8PP3-65XW spmrc vulnerable to prototype pollution

spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...

6.3CVSS5.9AI score0.00392EPSS
SaveExploits0References4
NVD
NVD
added 2025/09/24 8:15 p.m.9 views

CVE-2025-57327

spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...

7.5CVSS0.00392EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/24 12:00 a.m.21 views

spmrc 安全漏洞

spmrc is an open source spmrc management library from Static Package Manager. A security vulnerability exists in spmrc 1.2.0 and earlier versions, which stems from prototype contamination of the set and config functions, which allows an attacker to inject attributes via a specially crafted payloa...

7.5CVSS6.3AI score0.00392EPSS
SaveExploits0References2
Rows per page
Query Builder