EUVD-2025-9308

Malicious code in bioql PyPI...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Duplicate Advisory: @alizeait/unflatto Prototype Pollution via `exports.unflatto` Method

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q8jq-4rm5-4hm5. This link is maintained to preserve external references. Original Description alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38988: Improperly Controlled Modification of Object Prototype Attributes

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

Unflatto security vulnerabilities

unflatto is a tiny and fast flat extender by Ali Zeaiter Personal Developer. A security vulnerability exists in unflatto 1.0.2 and earlier versions, which stems from prototype contamination and could lead to arbitrary code execution or denial of service...

CVE-2024-38988

The alizeait unflatto library (versions 1.0.2 and earlier ) contains a prototype pollution vulnerability within the exports.unflatto method located at /dist/index.js. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Servic...

CVE-2024-38988

alizeait unflatto = 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/index.js. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

PT-2025-13572 · Alizeait · Unflatto

Name of the Vulnerable Software and Affected Versions: alizeait unflatto versions 1.0.2 and earlier Description: The issue is related to a prototype pollution vulnerability via the exports.unflatto method at /dist/index.js. This allows attackers to execute arbitrary code or cause a Denial of...