13 matches found
EUVD-2024-53524
Malicious code in bioql PyPI...
CVE-2024-57081
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57081
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
Prototype Pollution
Overview org.webjars.bower:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...
Prototype Pollution
Overview org.webjars.npm:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...
org.webjars.npm:catharsis (0.8.9) potentially affected by CVE-2024-57081 via org.webjars.npm:underscore-contrib (0.3.0)
org.webjars.npm:underscore-contrib MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:underscore-contrib and may be impacted: - org.webjars.npm:catharsis 0.8.9 Source cves: CVE-2024-57081 Source advisory:...
CVE-2024-57081: Uncontrolled Resource Consumption
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57081
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57081
The underscore-contrib library (version v0.3.0 ) is vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can provide a crafted payload containing an Object.prototype setter to inject or modify properties within the global prototype chain. This can result in a Denial o...
CVE-2024-57081
A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
PT-2025-5757
Name of the Vulnerable Software and Affected Versions: underscore-contrib version 0.3.0 Description: A prototype pollution in the lib.fromQuery function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For underscore-contrib version 0.3.0, consid...
underscore-contrib 安全漏洞
underscore-contrib is an open source application from DocumentCloud. A security vulnerability exists in underscore-contrib version v0.3.0, which stems from the lib.fromQuery function containing a prototype contamination vulnerability...
