#cwe-1321

共收录 238 条相关情报。

漏洞预警2026-07-13 发布INFO

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutateFieldData of the component API. This manipulation of the ...

CVE-2026-15538

A weakness has been identified in primefaces primereact up to 10.9.8. This issue affects the function ObjectUtils.mutate

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-1321

安全公告2026-07-11 发布INFO

Hono before 4.12.7 allows proto key in parseBody with dot option enabled, permitting...

CVE-2026-56763

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field na

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-1321 #severity:medium

漏洞预警2026-07-11 发布INFO

Hono before 4.12.7 allows proto key in parseBody with dot option enabled, permitting specially crafted form field names to create objects with proto properties. When par...

CVE-2026-56763

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field na

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

安全公告2026-07-11 发布INFO

Hono - Prototype Pollution via proto Key in parseBody with dot Option

CVE-2026-56763

Hono before 4.12.7 allows __proto__ key in parseBody with dot option enabled, permitting specially crafted form field na

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

漏洞预警2026-07-09 发布INFO

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a mani...

CVE-2026-15195

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Po

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-1321

安全公告2026-07-09 发布INFO

apidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollution

CVE-2026-15195

A weakness has been identified in apidevtools json-schema-ref-parser up to 15.3.5. This impacts the function Refs.set/Po

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-94

漏洞预警2026-07-09 发布INFO

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with the default workflow:create permission could pollute Objec...

CVE-2026-59206

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with t

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-07-09 发布INFO

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question...

CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Publ

历史摘要 · 未重新核验 · NVD

#cve #cwe-94 #cwe-1321

安全公告2026-07-09 发布INFO

n8n: Prototype Pollution via Workflow Credentials Leads to Unauthenticated User and Project Enumeration

CVE-2026-59206

n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated user with t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-07-09 发布INFO

enquirer Public Package API Enquirer.set prototype pollution

CVE-2026-15187

A security flaw has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Publ

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-94

漏洞预警2026-07-08 发布INFO

protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordin...

CVE-2026-59876

protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text For

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-07-08 发布INFO

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts proto as a key while parsing user-suppli...

CVE-2026-57439

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart opera

历史摘要 · 未重新核验 · NVD

#cve #cwe-79 #cwe-1321

安全公告2026-07-08 发布INFO

protobufjs: Text Format string map parsing can mutate returned map object prototype

CVE-2026-59876

protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text For

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321

安全公告2026-07-08 发布INFO

CyberChef: Prototype pollution in Series Chart operation

CVE-2026-57439

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart opera

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-1321 #cwe-79

漏洞预警2026-07-01 发布INFO

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jod...

CVE-2026-55886

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-07-01 发布INFO

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. In versions prior to 4.12.18, Jodit.configure(options) — and the internal C...

CVE-2026-54756

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. In versions prior

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

安全公告2026-07-01 发布INFO

@hey-api/openapi-ts's `buildClientParams` template: prototype chain substitution via unknown `$<slot>_proto` key

CVE-2026-48819

### Summary `dist/clients/core/params.ts` in `@hey-api/openapi-ts` ships a runtime template that is copied verbatim int

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-1321 #severity:medium

安全公告2026-06-30 发布INFO

@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754

CVE-2026-48795

### Summary The fix for [GHSA-f5x2-vj4h-vg4c](https://github.com/adonisjs/core/security/advisories/GHSA-f5x2-vj4h-vg4c)

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-1321 #severity:high

漏洞预警2026-06-26 发布INFO

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack

CVE-2026-57926

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321

漏洞预警2026-06-24 发布INFO

Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in version 4.3.0 and prior to version 5.4.4. Impact users h...

CVE-2026-54639

Style Dictionary, a build system for creating cross-platform styles, has a prototype pollution vulnerability starting in

历史摘要 · 未重新核验 · NVD

#cve #cwe-1321