Lucene search
K

11 matches found

OSV
OSV
added 2022/05/24 5:34 p.m.14 views

GHSA-WWG2-2CRQ-6GRR Prototype pollution in @strikeentco/set

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS7.8AI score0.02195EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/02/05 12:0 a.m.20 views

Prototype Pollution in @strikeentco/set

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS4AI score0.03498EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2022/02/05 12:0 a.m.13 views

GHSA-39QV-PRMH-X37F Prototype Pollution in @strikeentco/set

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.7AI score0.03498EPSS
Exploits1References6
NVD
NVD
added 2022/02/04 8:15 p.m.7 views

CVE-2021-23497

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS0.03498EPSS
Exploits1References3
Prion
Prion
added 2022/02/04 8:15 p.m.11 views

Remote code execution

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.6AI score0.03498EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2022/02/04 8:0 p.m.102 views

CVE-2021-23497

The CVE-2021-23497 entry affects the package @strikeentco/set prior to 1.0.2. The vulnerability arises from an incomplete fix and enables Prototype Pollution, leading to a Denial of Service and may enable Remote Code Execution. Affected code paths include unsafe recursive merges and path-based pr...

9.8CVSS8.9AI score0.03498EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/02/04 8:0 p.m.13 views

CVE-2021-23497 Prototype Pollution

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.9AI score0.03498EPSS
Exploits1References3
Veracode
Veracode
added 2020/11/11 4:55 a.m.15 views

Prototype Pollution

@strikeentco/set is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

7.5CVSS3.5AI score0.02195EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2020/11/10 4:15 p.m.13 views

CVE-2020-28267

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS7.8AI score0.02195EPSS
Exploits0References2
Prion
Prion
added 2020/11/10 4:15 p.m.14 views

Remote code execution

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

5CVSS7.8AI score0.02195EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2020/11/10 3:58 p.m.48 views

CVE-2020-28267

CVE-2020-28267 concerns a prototype pollution vulnerability in the package @strikeentco/set version 1.0.0. The available connected documents describe the flaw as prototype pollution that allows an attacker to cause a denial of service and may lead to remote code execution. No explicit exploitatio...

7.5CVSS7.8AI score0.02195EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder