CVE-2024-38994

The @amoy/common library (specifically version 1.0.10 ) is vulnerable to Prototype Pollution through the extend and setValue functions. An attacker can exploit this by passing crafted arguments containing a proto property to inject arbitrary properties, which alters the behavior of all objects in...

CVE-2024-39003

The amoyjs amoy common library, specifically version v1.0.10 , is vulnerable to prototype pollution via the setValue function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As no patch is currently avail...