3 matches found
OESA-2022-1769 nodejs security update
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
9.8CVSS6.7AI score0.69377EPSS
SaveExploits4References6
CVE-2020-7774
The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution...
9.8CVSS6.8AI score0.69377EPSS
SaveExploits1References5
Prototype Pollution
y18n is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...
9.8CVSS4AI score0.69377EPSS
SaveExploits1References8Affected Software5
20