CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2024-38987

CVE-2024-38987 affects aofl cli-lib v3.14.0, where a prototype pollution flaw in the defaultsDeep component enables arbitrary property injection, potentially allowing code execution or DoS. The connected advisories (GHSA and OSV entries) corroborate the same flaw. No specific patches or remediati...

CVE-2024-38987

aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...