#cwe-1321

共收录 238 条相关情报。

漏洞预警2026-10-02 发布INFO

Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: be...

CVE-2026-86536

Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-10-02 发布INFO

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift ...

CVE-2026-86535

Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attribute

历史摘要 · 未重新核验 · NVD

#cve #cwe-835 #cwe-1321

漏洞预警2026-10-01 发布INFO

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with ...

CVE-2026-104183

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

安全公告2026-10-01 发布INFO

stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects

CVE-2026-104183

stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

漏洞预警2026-09-29 发布INFO

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object properties when looking up atta...

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-eng

历史摘要 · 未重新核验 · NVD

#cve #cwe-20 #cwe-1321

安全公告2026-09-29 发布INFO

Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

CVE-2026-102600

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-eng

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-20

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited serialization options and visi...

CVE-2026-101909

Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFo

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls f...

CVE-2026-101908

Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request options without an own...

CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib

历史摘要 · 未重新核验 · NVD

#cve #cwe-441 #cwe-1321

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a repl...

CVE-2026-101904

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-1321

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an explicit method can read an i...

CVE-2026-101902

Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-ins

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-09-28 发布INFO

Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherited Symbol.toStringTag, append, and getHeaders properties w...

CVE-2026-101900

Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherite

历史摘要 · 未重新核验 · NVD

#cve #cwe-74 #cwe-693 #cwe-1321

安全公告2026-09-28 发布INFO

Axios: Prototype Pollution Gadget in axios toFormData Options

CVE-2026-101909

Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-09-28 发布INFO

Axios: Prototype pollution gadget in fetch adapter can alter outbound requests

CVE-2026-101908

Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-09-28 发布INFO

Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection

CVE-2026-101905

Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-441

安全公告2026-09-28 发布INFO

Axios: Header Injection via Inherited headers After Minimal Interceptor

CVE-2026-101904

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-74

安全公告2026-09-28 发布INFO

Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method

CVE-2026-101902

Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-ins

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-09-28 发布INFO

Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders

CVE-2026-101900

Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherite

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-693 #cwe-74

安全公告2026-09-28 发布INFO

scim-patch: Mutation of Inherited Built-in Method Objects

CVE-2026-61834

## Summary Incomplete Prototype Pollution Fix Allows Mutation of Inherited Built-in Method Objects `scim-patch` blocks

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-915 #cwe-1321 #severity:medium

安全公告2026-09-25 发布INFO

A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2...

CVE-2026-97724

A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlle

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1321 #severity:medium