netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-876p-c77m-x2hc
GHSA-88vr-hjqx-57qh
This commit is contained in:
advisory-database[bot]
2024-07-01 22:35:27 +00:00
parent b8aaa3f7ae
commit ca790a5ce1
2 changed files with 46 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json → advisories/github-reviewed/2024/07/GHSA-876p-c77m-x2hc/GHSA-876p-c77m-x2hc.json
+28 -6
View File
@@ -1,17 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-876p-c77m-x2hc",
"modified": "2024-07-01T15:32:17Z",
"modified": "2024-07-01T22:34:03Z",
"published": "2024-07-01T15:32:17Z",
"aliases": [
"CVE-2024-38996"
],
"summary": "ag-grid-community were discovered to contain a prototype pollution via the _.mergeDeep function",
"details": "ag-grid-community v31.3.2 and ag-grid-enterprise v31.3.2 were discovered to contain a prototype pollution via the _.mergeDeep function. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "ag-grid-enterprise"
},
"versions": [
"31.3.2"
]
},
{
"package": {
"ecosystem": "npm",
"name": "ag-grid-community"
},
"versions": [
"31.3.2"
]
}
],
"references": [
{
@@ -29,15 +47,19 @@
{
"type": "WEB",
"url": "https://gist.github.com/mestrtee/f8037d492dab0d77bca719e05d31c08b"
},
{
"type": "PACKAGE",
"url": "https://github.com/ag-grid/ag-grid"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1321"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-07-01T22:34:03Z",
"nvd_published_at": "2024-07-01T13:15:05Z"
}
}
advisories/unreviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json → advisories/github-reviewed/2024/07/GHSA-88vr-hjqx-57qh/GHSA-88vr-hjqx-57qh.json
+18 -5
View File
@@ -1,17 +1,26 @@
{
"schema_version": "1.4.0",
"id": "GHSA-88vr-hjqx-57qh",
"modified": "2024-07-01T15:32:18Z",
"modified": "2024-07-01T22:34:44Z",
"published": "2024-07-01T15:32:17Z",
"aliases": [
"CVE-2024-38997"
],
"summary": "adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults",
"details": "adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.",
"severity": [
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "@adolph_dudu/ratio-swiper"
},
"versions": [
"0.0.2"
]
}
],
"references": [
{
@@ -21,15 +30,19 @@
{
"type": "WEB",
"url": "https://gist.github.com/mestrtee/840f5d160aab4151bd0451cfb822e6b5"
},
{
"type": "PACKAGE",
"url": "https://github.com/Adophlidu/swiper"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-07-01T22:34:44Z",
"nvd_published_at": "2024-07-01T13:15:05Z"
}
}