EUVD-2024-53524

Malicious code in bioql PyPI...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

org.webjars.npm:catharsis (0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (0.3.0)

org.webjars.npm:underscore-contrib MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis 0.8.9 Source cves: CVE-2024-57081 Source advisory:...

Prototype Pollution

Overview org.webjars.bower:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

Prototype Pollution

Overview org.webjars.npm:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

The underscore-contrib library (version v0.3.0 ) is vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can provide a crafted payload containing an Object.prototype setter to inject or modify properties within the global prototype chain. This can result in a Denial o...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081: Uncontrolled Resource Consumption

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

@geneontology/noctua-form-base (>=1.5.2-3.1, <=1.5.44), @geneontology/wc-gocam-viz (>=0.0.3, <=0.0.38) +61 more potentially affected by CVE-2024-57081 via underscore-contrib (>=0.1.4, <=0.3.0)

underscore-contrib NPM version =0.1.4, =1.5.2-3.1, =0.0.3, =1.0.5, =0.0.3, =0.0.16, =0.8.0, =0.1.0, =1.4.0, =0.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.4 and more Source cves: CVE-2024-57081 Source advisory: MEND:CVE-2024-57081...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

underscore-contrib security vulnerabilities

underscore-contrib is an open source application from DocumentCloud. A security vulnerability exists in underscore-contrib version v0.3.0, which stems from the lib.fromQuery function containing a prototype contamination vulnerability...

PT-2025-5757

Name of the Vulnerable Software and Affected Versions: underscore-contrib version 0.3.0 Description: A prototype pollution in the lib.fromQuery function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For underscore-contrib version 0.3.0, consid...