9 matches found
EUVD-2024-53522
Malicious code in bioql PyPI...
Prototype Pollution
@zag-js/core is vulnerable to prototype pollution. The vulnerability is due to improper handling of crafted payloads in the lib.deepMerge function, allowing attackers to cause a Denial of Service DoS...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@agniflow-ui/panda-preset (0.0.4), @agniflow-ui/react (>=0.0.1, <=0.0.4) +345 more potentially affected by CVE-2024-57079 via @zag-js/core (>=0.0.0-dev-20220406144843, <=0.82.1)
@zag-js/core NPM version =0.0.0-dev-20220406144843, =0.0.1, =0.0.1, =0.0.3-02402d7.0, =0.0.28-86b217d.0, =0.1.0, =0.0.0-rc-20221106094212, =0.0.0-rc-20221106094212, =0.1.0, =0.0.0-rc-20221106094212, =0.0.17, =0.0.2, =0.0.10 - @atlrdsgn/kit 0.3.7 - @beae-ui/accordion 1.0.0 - @beae-ui/pin-input 1.0...
@zag-js/core prototype pollution
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
CVE-2024-57079
The CVE CVE-2024-57079 affects @zag-js/core v0.50.0, where the lib.deepMerge function is vulnerable to prototype pollution triggered by crafted payloads, enabling a Denial of Service (DoS). The issue is documented across multiple sources (NVD, Red Hat, Veracode, GHSA, OSV, CNNVD) as a prototype p...
