EUVD-2024-53524

Malicious code in bioql PyPI...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Prototype Pollution

Overview org.webjars.npm:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

org.webjars.npm:catharsis (=0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (=0.3.0)

org.webjars.npm:underscore-contrib MAVEN version =0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis =0.8.9 Source cves: CVE-2024-57081 Source advisory:...

Prototype Pollution

Overview org.webjars.bower:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57081

underscore-contrib v0.3.0 contains a prototype pollution flaw in the lib.fromQuery function. An attacker can trigger a Denial of Service by supplying a crafted payload that manipulates Object.prototype via the vulnerable path, as demonstrated in multiple sources (including Snyk reports). The core...

underscore-contrib 安全漏洞

underscore-contrib is an open source application from DocumentCloud. A security vulnerability exists in underscore-contrib version v0.3.0, which stems from the lib.fromQuery function containing a prototype contamination vulnerability...

CVE-2024-57081

A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...