EUVD-2024-53517

Malicious code in bioql PyPI...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

Prototype Pollution

Overview org.webjars.npm:xe-utils is a JavaScript 函数库、工具类 Affected versions of this package are vulnerable to Prototype Pollution through the merge function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...

org.webjars.npm:vxe-pc-ui (4.14.26), org.webjars.npm:vxe-table (4.19.6) +1 more potentially affected by CVE-2024-57074 via org.webjars.npm:xe-utils (4.0.8)

org.webjars.npm:xe-utils MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:xe-utils and may be impacted: - org.webjars.npm:vxe-pc-ui 4.14.26 - org.webjars.npm:vxe-table 4.19.6 - org.webjars.npm:vxe-uicore 4.4.13 Source...

@beck-zgh/layout-admin (1.2.5), @beck-zgh/pro-element-plus (>=1.2.3, <=1.2.5) +337 more potentially affected by CVE-2024-57074 via xe-utils (>=1.9.8, <=3.5.31)

xe-utils NPM version =1.9.8, =1.2.3, =1.13.0, =0.1.1-beta.0, =0.1.1, =0.4.58, =0.4.38, =0.4.0-rc.2, =0.4.19, =0.1.1, =0.4.18, =0.6.166 - @excelltechkylcv2/components 1.0.0 - @excelltechkylcv2/render 1.0.0 and more Source cves: CVE-2024-57074 Source advisory: MEND:CVE-2024-57074...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074: Uncontrolled Resource Consumption

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

The JavaScript library xe-utils (specifically version v3.5.31 ) is vulnerable to Prototype Pollution within the lib.merge function. An attacker can exploit this by supplying a crafted payload to inject properties into the global Object.prototype chain. This can lead to a Denial of Service (DoS) b...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57074

A prototype pollution in the lib.merge function of xe-utils v3.5.31 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5751 · Xe-Utils · Xe-Utils

Name of the Vulnerable Software and Affected Versions: xe-utils version 3.5.31 Description: A prototype pollution in the lib.merge function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For version 3.5.31, consider disabling the lib.merge...

xe-utils security vulnerabilities

xe-utils is an open source javascript library, toolkit from XE. A security vulnerability exists in xe-utils version v3.5.31, which stems from the lib.merge function containing a prototype contamination vulnerability...

Prototype Pollution in x-extends/xe-utils

Description xe-utils is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: javascript // poc.js const set = require'xe-utils' console.log'Before: ', .polluted set, 'proto.polluted', true console.log'After: ', .polluted 2. Execute the following commands in the...