Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:38:27 +0000 EUVD-2026-38070 https://cve.radiocsirt.org/vuln/euvd-2026-38070 EUVD-2026-38070 https://cve.radiocsirt.org/vuln/euvd-2026-38070 fkie_cve-2020-7600 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7600 <p>querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.</p> <p>querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7600 GHSA-2cf2-2383-h4jv — Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen https://cve.radiocsirt.org/vuln/ghsa-2cf2-2383-h4jv <p><strong>Affected:</strong> npm: querymen</p> <p>querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.</p> <p><strong>Affected:</strong> npm: querymen</p> <p>querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-2cf2-2383-h4jv gsd-2020-7600 https://cve.radiocsirt.org/vuln/gsd-2020-7600 gsd-2020-7600 https://cve.radiocsirt.org/vuln/gsd-2020-7600