CyberChef: Prototype pollution in Series Chart operation
CVE-2026-57439
On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series
#cwe-1321
共收录 238 条相关情报。
← 返回所有主题mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to ...
CVE-2026-97151
mammoth(又称 mammoth.js)是一个广泛使用的 JavaScript 库,用于把 .docx 等 Word 文档转换为 HTML 或 Markdown,常见于文档预览、内容导入、富文本转换等后端或前端场景。NVD 披露,1.1
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resol...
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
scim-patch: Mutation of Inherited Built-in Method Objects
CVE-2026-61834
scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and as
deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properly validate keys being written to target objects. Attacker...
CVE-2026-93753
deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properl
deepmerge through 4.3.1 Prototype Poisoning via mergeObject
CVE-2026-93753
deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the mergeObject() function that fails to properl
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution...
CVE-2026-92781
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the unflatten he
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution...
CVE-2026-92779
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set hel
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings withou...
CVE-2026-92779
Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set hel
yayson: Prototype pollution in Store/LegacyStore deserialization
CVE-2026-61534
# Summary `Store`/`LegacyStore` key internal lookup tables by the `type`, `id`, and relationship names from a JSON:API d
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype b...
CVE-2026-89011
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a ma
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation...
CVE-2026-85625
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any ma
sift 17.1.3 Prototype Pollution Remote Code Execution via $where
CVE-2026-85625
sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any ma
node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-parse with the columns and group_columns_by_name options enab...
CVE-2026-85063
node-csv is a full-featured CSV parser with a simple API that is tested against large datasets. Prior to 7.0.2, csv-pars
toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked by a table path such as a.b.y.__proto__.__proto__, allowin...
CVE-2026-63376
toml-node is a TOML parser for Node.js and the browser. Prior to 4.1.2, toml.parse() in lib/compiler.js can be tricked b
toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization
CVE-2026-63376
### Summary `toml.parse()` writes attacker-controlled keys onto `Object.prototype`. The compiler protects the tables it
TOON: Prototype pollution when decoding untrusted TOON input
CVE-2026-82404
### Summary Decoding attacker-controlled TOON containing a `__proto__`, `constructor`, or `prototype` key wrote through
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a __proto__, constructor, or prototype key w...
CVE-2026-82404
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controll
TOON: Prototype pollution when decoding untrusted TOON input
CVE-2026-82404
TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controll
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the successor joi package ...
CVE-2026-84368
joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/