Umbraengineering

umbraengineering

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Merge Recursive

merge-recursive

1 CVE

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-16460 1Umbraengineering 1Ps Nov 21, 2024 Sep 7, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.
CVE-2018-3751 1Umbraengineering 1Merge Recursive Nov 21, 2024 Jul 3, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This c...Show more The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-16460

1Umbraengineering

1Ps

Nov 21, 2024

Sep 7, 2018

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

A command Injection in ps package versions <1.0.0 for Node.js allowed arbitrary commands to be executed when attacker controls the PID.

CVE-2018-3751

1Umbraengineering

1Merge Recursive

Nov 21, 2024

Jul 3, 2018

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

The utilities function in all versions <= 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This c...Show more