13 matches found
EUVD-2024-53522
Malicious code in bioql PyPI...
Prototype Pollution
@zag-js/core is vulnerable to prototype pollution. The vulnerability is due to improper handling of crafted payloads in the lib.deepMerge function, allowing attackers to cause a Denial of Service DoS...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@zag-js/core prototype pollution
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +347 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-dev-20220406144843, <=0.82.1)
@zag-js/core NPM version =0.0.0-dev-20220406144843, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input 1.0...
@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +347 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-dev-20220406144843, <=0.82.1)
@zag-js/core NPM version =0.0.0-dev-20220406144843, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input 1.0...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57079
The @zag-js/core library, specifically version v0.50.0 , is vulnerable to prototype pollution within the lib.deepMerge function. This flaw allows an attacker to cause a Denial of Service (DoS) by supplying a crafted payload. Numerous downstream packages, such as @ark-ui/react , @ark-ui/vue , and ...
CVE-2024-57079: Uncontrolled Resource Consumption
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +347 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-v1-beta-20250220125322, <=0.82.1)
@zag-js/core NPM version =0.0.0-v1-beta-20250220125322, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input...
