2 matches found
CVE-2024-38994
amoy common (amoyjs) v1.0.10 is affected by a prototype pollution vulnerability in the extend function. Attackers can craft arguments with a proto property to alter object prototypes, potentially leading to arbitrary code execution or Denial of Service. Mitigation notes from PT Security suggest d...
CVE-2024-39003
Amoyjs amoy common v1.0.10 contains a prototype pollution flaw in the setValue function. The issue can enable attackers to inject arbitrary properties, leading to arbitrary code execution or Denial of Service (DoS). Reported by multiple sources (Veracode, Red Hat, CVEs), the vulnerability is link...