EUVD-2021-1026

Malware in sbrugna...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: OSV:GHSA-9829-JJ5P-J6HF...

GHSA-9829-JJ5P-J6HF Prototype Pollution in worksmith

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...

Prototype Pollution in worksmith

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7725

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

Design/Logic Flaw

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7725

Worksmith is vulnerable to a prototype pollution flaw via the setValue function. Affected versions are all prior to 1.0.1 (up to 1.0.0). The issue enables pollution of Object.prototype through unsafe merging or path-based setting, with potential to impact application behavior. Remediation guidanc...

CVE-2020-7725 Prototype Pollution

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function...

PT-2020-19746 · Npm · Worksmith

Name of the Vulnerable Software and Affected Versions: worksmith versions prior to 1.0.1 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions up to and including 1.0.0 of the worksmith package. Recommendations: For versions prior to 1.0.1, updat...

worksmith_etcd (>=0.0.1 <=0.2.1) potentially affected by CVE-2020-7725 via worksmith (>=0.0.22 <=0.1.8)

worksmith NPM version =0.0.22, =0.0.1, =0.2.1 Source cves: CVE-2020-7725 Source advisory: SNYK:JS-WORKSMITH-598798...

Prototype Pollution

Overview worksmith is an A purely functional workflow engine Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const worksmith = require'worksmith'; worksmith.setValue, 'proto.polluted', true; console.logpolluted; // true Details Prototype...