@-0/browser (>=0.3.1 <=0.3.61), @cfxjs/extension-runtime (>=0.0.1 <=0.0.4) +41 more potentially affected by CVE-2024-29650 via @thi.ng/paths (>=1.6.6 <=4.2.14)

@thi.ng/paths NPM version =1.6.6, =0.3.1, =0.0.1, =0.0.2, =0.0.1, =0.2.0, =0.2.0, =0.0.4, =0.0.3, =0.0.13, =0.0.1, =1.0.5, =0.0.1, =0.3.0, =0.3.2 and more Source cves: CVE-2024-29650 Source advisory: OSV:GHSA-8PPR-WWW8-HFJX...

thi.ng paths 安全漏洞

thi.ng paths is a path-based object property/array accessor with struct-shared immutable, optimized and optional types. A security vulnerability exists in thi.ng paths version v.5.1.62 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code via the mutIn and...

PT-2024-22950

Name of the Vulnerable Software and Affected Versions @thi.ng/paths versions 5.1.62 and earlier Description An issue in the software allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components. This enables the attacker to perform unauthorized actions on the...