Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2026/03/13 12:23 a.m.2 views

SUSE CVE-2026-30226

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In devalue v5.6.3 and earlier, devalue.parse and devalue.unflatten were susceptible to prototype pollution via maliciously crafted payloads. Successful exploitation could...

7.5CVSS5.8AI score0.00373EPSS
Exploits0References3
OSV
OSV
added 2026/03/12 2:13 p.m.1 views

GHSA-CFW5-2VXH-HR84 devalue has prototype pollution in devalue.parse and devalue.unflatten

In devalue v5.6.3, devalue.parse and devalue.unflatten were susceptible to prototype pollution via maliciously crafted payloads. Successful exploitation could lead to Denial of Service DoS or type confusion...

6.3CVSS5.9AI score0.00373EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/11 5:47 p.m.0 views

CVE-2026-30226 devalue has prototype pollution in devalue.parse and devalue.unflatten

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In devalue v5.6.3 and earlier, devalue.parse and devalue.unflatten were susceptible to prototype pollution via maliciously crafted payloads. Successful exploitation could...

6.3CVSS5.8AI score0.00373EPSS
Exploits0References1
OSV
OSV
added 2026/03/11 5:47 p.m.1 views

CVE-2026-30226 devalue has prototype pollution in devalue.parse and devalue.unflatten

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In devalue v5.6.3 and earlier, devalue.parse and devalue.unflatten were susceptible to prototype pollution via maliciously crafted payloads. Successful exploitation could...

6.3CVSS5.8AI score0.00373EPSS
Exploits0References3
CVE
CVE
added 2026/03/11 5:47 p.m.9 views

CVE-2026-30226

The CVE relates to the Svelte devalue JavaScript library. Affected versions are 5.6.3 and earlier, where devalue.parse and devalue.unflatten are vulnerable to prototype pollution via malicious payloads. Exploitation can cause Denial of Service (DoS) or type confusion. The issue is mitigated by up...

7.5CVSS5.8AI score0.00373EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/25 12:0 a.m.4 views

Vulnerability of the GraphicBuffer::unflatten() function in the Android operating system, allowing attackers to escalate their privileges

The vulnerability of the GraphicBuffer::unflatten function in the Android operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain increased privileges...

8.4CVSS7.2AI score0.00168EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder