Open-source package vulnerability · npm
CVE-2024-38989: Prototype pollution in izatop bunt
criticalCVSS 3.1 9.8GHSA-p734-xg27-8cfq
izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability allows attackers to execute arbitrary code via injecting arbitrary properties.
Published Aug 12, 2024 · Updated Aug 13, 2024
Affected packages
@bunt/app
- Ecosystem
- npm
- Affected
- < 0.29.26
- Fixed in
- 0.29.26
- Check
npm ls @bunt/app
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
izatop bunt v0.29.19 was discovered to contain a prototype pollution via the component /esm/qs.js. This vulnerability allows attackers to execute arbitrary code via injecting arbitrary properties.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology