CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
540 vulnerabilities with CWE-1321
CVE-2024-38994
HIGH
amoyjs common 1.0.10 - Prototype Pollution via extend Function
CVSS 7.3
CVE-2024-38992
HIGH
airvertco frappejs 0.0.11 - Prototype Pollution via registerView Function
CVSS 8.8
CVE-2024-38991
HIGH
akbr patch-into 1.0.1 - Prototype Pollution via patchInto Function
CVSS 8.8
CVE-2024-38987
MEDIUM
aofl cli-lib 3.14.0 - Prototype Pollution via defaultsDeep Component
CVSS 6.3
CVE-2024-36578
MEDIUM
akbr update <1.0.0 - Info Disclosure
CVSS 5.9
CVE-2024-36577
HIGH
aphp js-object-resolver <3.1.1 - Info Disclosure
CVSS 8.3
CVE-2024-36574
MEDIUM
flatten-json 1.0.1 - Prototype Pollution via unflattenJSON Function
CVSS 6.3
CVE-2024-36573
CRITICAL
almela obx < 0.0.4 - Prototype Pollution via obx/build/index.js
CVSS 9.8
CVE-2024-36582
CRITICAL
alexbinary object-deep-assign <1.0.11 - Info Disclosure
CVSS 9.8
CVE-2024-36583
HIGH
Byond Real Accessor <=1.0.0 - Code Injection
CVSS 8.1
CVE-2024-36580
CRITICAL
cdr0/sg 1.0.10 - Prototype Pollution
CVSS 9.8
CVE-2024-21512
HIGH
mysql2 < 3.9.8 - Prototype Pollution via nestTables Input
CVSS 8.2
CVE-2024-29651
HIGH
API Dev Tools json-schema-ref-parser <11.1.0 - RCE
CVSS 8.1
CVE-2024-24293
HIGH
@bit/loader 10.0.3 - Prototype Pollution via M Function e Argument
CVSS 8.8
CVE-2024-34273
MEDIUM
njwt < 2.0.1 - Prototype Pollution via Parser.prototype.parse Method
CVSS 5.9
CVE-2024-34698
MEDIUM
FreeScout < 1.8.139 - Prototype Pollution via getQueryParam Function
CVSS 4.6
CVE-2024-34148
MEDIUM
Jenkins Subversion Partial Release Manager Plugin <1.0.1 - RCE
CVSS 6.8
CVE-2024-32866
HIGH
Conform < 1.1.1 - Prototype Pollution via Nested Object Parsing
CVSS 8.6
CVE-2024-30564
CRITICAL
nora-firebase-common 1.0.41-1.12.2 - Remote Code Execution via updateState Parameter Prototype Pollution
CVSS 9.8
CVE-2024-21509
MEDIUM
sidorares/mysql2 < 3.9.4 - Prototype Pollution via Insecure Results Object Creation
CVSS 6.5
CVE-2024-29650
CRITICAL
@thi.ng/paths < 5.1.63 - Prototype Pollution via mutIn and mutInManyUnsafe Components
CVSS 9.8
CVE-2024-21505
HIGH
web3-utils < 4.2.1 - Prototype Pollution via Format and MergeDeep Utility Functions
CVSS 7.5
CVE-2024-2495
MEDIUM
FriendlyWrt <2022-11-16.51b3d35 - Info Disclosure
CVSS 5.2
CVE-2024-27307
CRITICAL
JSONata <1.8.7, >1.4.0 & <2.0.4 - RCE
CVSS 9.8
CVE-2024-23339
MEDIUM
hoolock 2.0.0-2.2.1 - Prototype Pollution via Object Path Utility Functions
CVSS 6.3
Details
Vulnerabilities
540