Malicious code in rfs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...

Prototype Pollution

@antfu/utils is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the deepMerge function of object.js which allows an attacker to inject and modify malicious properties such as proto, resulting in prototype pollution...

128981semzub (=1.0.1), 2ra-ui (>=0.0.0 <=1.3.0) +2875 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7 <=0.7.2)

@antfu/utils NPM version =0.1.7, =0.0.0, =0.1.5, =0.1.0, =0.0.2, =1.0.0-beta.0, =1.0.0, =0.0.1-alpha.0, =0.0.1-alpha.1, =0.0.3-alpha.2, =0.0.1-alpha.4, =1.1.60, =1.1.0, =1.3.21 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Code injection

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

CVE-2023-2972 Prototype Pollution in antfu/utils

Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...

PT-2023-22371 · Unknown · Antfu/Utils

Name of the Vulnerable Software and Affected Versions: antfu/utils versions prior to 0.7.3 Description: The issue is related to Prototype Pollution in the GitHub repository antfu/utils. Recommendations: For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...

CVE-2023-2972

CVE-2023-2972 describes a prototype pollution vulnerability in the GitHub repository antfu/utils prior to 0.7.3. The issue is confirmed across multiple sources (NVD/OSV/GHSA) as a prototype contamination in the utility’s codebase. Reported impact in the CVE data indicates high-level risk, but the...

utils 安全漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in versions of utils prior to 0.7.3 that stems from the presence of prototype contamination...

powerpc-utils bug fix and enhancement update

An update is available for powerpc-utils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linu...

maven bug fix and enhancement update

An update is available for plexus-interpolation, httpcomponents-core, maven-wagon, maven, google-guice, jsoup, jansi, apache-commons-io, apache-commons-lang3, maven-shared-utils, plexus-utils, plexus-classworlds, jakarta-annotations, httpcomponents-client, apache-commons-codec, plexus-cipher,...

CVE-2022-37599

A flaw was found in the interpolateName function in interpolateName.js in the webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js. This flaw can lead to a regular expression denial of service ReDoS. Mitigation Mitigation for this issue is either not available or the...

alsa-utils bug fix and enhancement update

An update is available for alsa-utils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

maven-shared-utils: Command injection via Commandline class

A flaw was found in the maven-shared-utils package. This issue allows a Command Injection due to improper escaping, allowing a shell injection attack...

cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root

A stack-based buffer overflow issue was found in cifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root privileges...

Moderate: Red Hat Bug Fix Advisory: cifs-utils bug fix and enhancement update

An update for cifs-utils is now available for Red Hat Enterprise Linux 8. For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section...