CVE-2024-38993

CVE-2024-38993 affects jsonic-next (rjrodger) version 2.12.1. The vulnerability is a prototype pollution in the function empty, allowing an attacker to inject arbitrary properties and potentially execute arbitrary code or cause a Denial of Service. Multiple sources confirm the issue originates in...

CVE-2024-39002

CVE-2024-39002 affects jsonic-next v2.12.1, with a prototype pollution flaw in the function util.clone . Exploitation can allow an attacker to execute arbitrary code or cause a Denial of Service by injecting arbitrary properties. A short-term workaround from PT Security recommends disabling the u...