https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 15:48:27 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-236053 EUVD-2026-236053 https://cve.radiocsirt.org/vuln/euvd-2026-236053 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25915 <p>Prototype pollution vulnerability in &#39;changeset&#39; versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution.</p> <p>Prototype pollution vulnerability in &#39;changeset&#39; versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-25915 https://cve.radiocsirt.org/vuln/ghsa-2gqw-q9r9-7f79 <p><strong>Affected:</strong> npm: changeset</p> <p>### Overview Prototype pollution vulnerability in &#39;changeset&#39; versions 0.0.1 through 0.2.5 allows attackers to cause a denial of service and may lead to remote code execution.</p> <p>### Details The npm module &#39;changeset&#39; can be abused by Prototype Pollution vulnerability since the function &#39;apply()&#39; does not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or able to manipulate the property which leads to Denial of Service or potentially Remote code execution.</p> <p>### PoC Details The &#39;apply()&#39; function accepts &#39;changes, target, modify&#39; as argument. Due to the absence of validation on the values passed into the &#39;changes&#39; argument, an attacker can supply a malicious value by adjusting the value to include the &#39;__proto__&#39; property. Since there is no validation before assigning the property to check whether the assigned argument is the Object&#39;s own property or not, the property &#39;polluted&#39; will be directly be assigned to the new object thereby polluting the Object prototype. Using the example below, if there is a check to validate &#39;polluted&#39; the valued later in the code, it would be substituted as &#34;Yes! Its Polluted&#34; as it had been polluted.</p> <p>### PoC Code</p> <p>```js var changeset = require(&#34;changeset&#34;) const patch = [{ type: &#39;put&#39;, key: [&#34;__proto__&#34;, &#34;polluted&#34;], value: &#34;Yes! Its Polluted&#34; }]; console.log(&#34;Before : &#34; + {}.polluted); changeset.apply(patch, {}, true); console.log(&#34;After : &#34; + {}.p…</p> <p><strong>Affected:</strong> npm: changeset</p> <p>### Overview Prototype pollution vulnerability in &#39;changeset&#39; versions 0.0.1 through 0.2.5 allows attackers to cause a denial of service and may lead to remote code execution.</p> <p>### Details The npm module &#39;changeset&#39; can be abused by Prototype Pollution vulnerability since the function &#39;apply()&#39; does not check for the type of object before assigning value to the property. Due to this flaw an attacker could create a non-existent property or able to manipulate the property which leads to Denial of Service or potentially Remote code execution.</p> <p>### PoC Details The &#39;apply()&#39; function accepts &#39;changes, target, modify&#39; as argument. Due to the absence of validation on the values passed into the &#39;changes&#39; argument, an attacker can supply a malicious value by adjusting the value to include the &#39;__proto__&#39; property. Since there is no validation before assigning the property to check whether the assigned argument is the Object&#39;s own property or not, the property &#39;polluted&#39; will be directly be assigned to the new object thereby polluting the Object prototype. Using the example below, if there is a check to validate &#39;polluted&#39; the valued later in the code, it would be substituted as &#34;Yes! Its Polluted&#34; as it had been polluted.</p> <p>### PoC Code</p> <p>```js var changeset = require(&#34;changeset&#34;) const patch = [{ type: &#39;put&#39;, key: [&#34;__proto__&#34;, &#34;polluted&#34;], value: &#34;Yes! Its Polluted&#34; }]; console.log(&#34;Before : &#34; + {}.polluted); changeset.apply(patch, {}, true); console.log(&#34;After : &#34; + {}.p…</p> https://cve.radiocsirt.org/vuln/ghsa-2gqw-q9r9-7f79 https://cve.radiocsirt.org/vuln/gsd-2021-25915 gsd-2021-25915 https://cve.radiocsirt.org/vuln/gsd-2021-25915