← All credits

Peng Zhou (zpbrent@gmail.com)

2 vulnerability records and advisories credit this contributor.

Apache Airflow: Potential pickle deserialization vulnerability in XComs

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype