5 matches found
Prototype Pollution
@zag-js/core is vulnerable to prototype pollution. The vulnerability is due to improper handling of crafted payloads in the lib.deepMerge function, allowing attackers to cause a Denial of Service DoS...
7.5CVSS7.4AI score0.00423EPSS
SaveExploits0References2Affected Software1
CVE-2024-57079
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
7.5CVSS6.5AI score0.00423EPSS
SaveExploits0References1
@zag-js/core prototype pollution
A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
7.5CVSS6.7AI score0.00423EPSS
SaveExploits0References5Affected Software1
20