https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:09:36 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/certfr-2022-avi-785 https://cve.radiocsirt.org/vuln/euvd-2026-166758 EUVD-2026-166758 https://cve.radiocsirt.org/vuln/euvd-2026-166758 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23438 <p>This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is [&#39;__proto__&#39;]. This is because the method that has been called if the input is an array is Array.prototype.indexOf() and not String.prototype.indexOf(). They behave differently depending on the type of the input.</p> <p>This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is [&#39;__proto__&#39;]. This is because the method that has been called if the input is an array is Array.prototype.indexOf() and not String.prototype.indexOf(). They behave differently depending on the type of the input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23438 https://cve.radiocsirt.org/vuln/ghsa-p92x-r36w-9395 <p><strong>Affected:</strong> npm: mpath</p> <p>This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition `ignoreProperties.indexOf(parts[i]) !== -1` returns `-1` if `parts[i]` is `[&#39;__proto__&#39;]`. This is because the method that has been called if the input is an array is `Array.prototype.indexOf()` and not `String.prototype.indexOf()`. They behave differently depending on the type of the input.</p> <p><strong>Affected:</strong> npm: mpath</p> <p>This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition `ignoreProperties.indexOf(parts[i]) !== -1` returns `-1` if `parts[i]` is `[&#39;__proto__&#39;]`. This is because the method that has been called if the input is an array is `Array.prototype.indexOf()` and not `String.prototype.indexOf()`. They behave differently depending on the type of the input.</p> https://cve.radiocsirt.org/vuln/ghsa-p92x-r36w-9395 https://cve.radiocsirt.org/vuln/gsd-2021-23438 gsd-2021-23438 https://cve.radiocsirt.org/vuln/gsd-2021-23438