https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:38:16.998530+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-38070 EUVD-2026-38070 2026-10-03T06:38:17.060270+00:00 EUVD-2026-38070 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7600 fkie_cve-2020-7600 2026-10-03T06:38:17.060305+00:00

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.

 https://cve.radiocsirt.org/vuln/ghsa-2cf2-2383-h4jv GHSA-2cf2-2383-h4jv — Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen 2026-10-03T06:38:17.060337+00:00

Affected: npm: querymen

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.

 https://cve.radiocsirt.org/vuln/gsd-2020-7600 gsd-2020-7600 2026-10-03T06:38:17.060362+00:00 gsd-2020-7600