CVE-2024-38994

The amoyjs amoy common library (version 1.0.10 ) is vulnerable to prototype pollution due to the extend and setValue functions. Attackers can exploit this by passing crafted arguments with a proto property to inject arbitrary attributes, potentially leading to arbitrary code execution or a Denial...

CVE-2024-39003

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.