EUVD-2024-53517

Malicious code in bioql PyPI...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Prototype Pollution

Overview org.webjars.npm:xe-utils is a JavaScript 函数库、工具类 Affected versions of this package are vulnerable to Prototype Pollution through the merge function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

xe-utils 安全漏洞

xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...

PT-2025-5751 · Xe-Utils · Xe-Utils

Name of the Vulnerable Software and Affected Versions: xe-utils version 3.5.31 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 3.5.31, consider disabling the lib.merge...

CVE-2024-57074

CVE-2024-57074 concerns xe-utils v3.5.31, where a prototype pollution in the lib.merge function enables DoS via a crafted payload. Affected component: xe-utils (lib.merge). Root cause: unsafe recursive merge/parsing allowing proto or path-based pollution. Impact: Denial of Service; remote code ex...

Prototype Pollution in x-extends/xe-utils

Description xe-utils is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: javascript // poc.js const set = require'xe-utils' console.log'Before: ', .polluted set, 'proto.polluted', true console.log'After: ', .polluted 2. Execute the following commands in the...