EUVD-2021-1026

Malware in sbrugna...

GHSA-9829-JJ5P-J6HF Prototype Pollution in worksmith

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: OSV:GHSA-9829-JJ5P-J6HF...

Prototype Pollution in worksmith

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7725

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

Design/Logic Flaw

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7725

Worksmith is vulnerable to a prototype pollution flaw via the setValue function. Affected versions are all prior to 1.0.1 (up to 1.0.0). The issue enables pollution of Object.prototype through unsafe merging or path-based setting, with potential to impact application behavior. Remediation guidanc...

CVE-2020-7725 Prototype Pollution

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

PT-2020-19746 · Npm · Worksmith

Name of the Vulnerable Software and Affected Versions: worksmith versions prior to 1.0.1 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions up to and including 1.0.0 of the worksmith package. Recommendations: For versions prior to 1.0.1, updat...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: SNYK:JS-WORKSMITH-598798...

Prototype Pollution

Overview worksmith is an A purely functional workflow engine Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const worksmith = require'worksmith'; worksmith.setValue, 'proto.polluted', true; console.logpolluted; // true Details Prototype...