EUVD-2024-53523

Malicious code in bioql PyPI...

CVE-2023-1001

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

Prototype Pollution

Vxe-table is vulnerable to Prototype pollution. The vulnerability is due to prototype pollution in the lib.install function, which allows attackers to supply a crafted payload, leading to a Denial of Service DoS...

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

vxe-table prototype pollution

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

GHSA-89FP-F5MX-748X vxe-table prototype pollution

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

PT-2025-5756 · Vxe-Table · Vxe-Table

Name of the Vulnerable Software and Affected Versions: vxe-table version 4.8.10 Description: A prototype pollution in the lib.install function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For vxe-table version 4.8.10, consider disabling the...

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

vxe-table security vulnerabilities

vxe-table is a vue-based PC-side form/table component from XE open source. A security vulnerability exists in vxe-table version v4.8.10, which stems from the lib.install function containing a prototype contamination vulnerability...

CVE-2024-57080

The vxe-table (NPM) component, a Vue-based form/table library, is vulnerable to Prototype Pollution in versions >=4.1.0 and

CVE-2024-57080: Improperly Controlled Modification of Object Prototype Attributes

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57080

A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Cross Site Scripting(XSS)

vxe-table is vulnerable to Cross Site Scripting XSS. The vulnerability is due to inadequate sanitization of user-supplied input within the inputValue argument of the export function in the vxe-textarea component. It allows malicious actors to execute arbitrary JavaScript code within the context o...

vxe-table Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

GHSA-2QJP-FG8C-G878 vxe-table Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

CVE-2023-1001

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...

CVE-2023-1001 xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inputValue leads to cross site scripting...