Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
sp-common 安全漏洞
Vulnerability Description
sp-common是Peter个人开发者的一个库。 sp-common v0.5.4版本存在安全漏洞，该漏洞源于通过函数mergeDeep包含原型污染，允许攻击者通过注入任意属性来执行任意代码或导致拒绝服务(DoS)。
CVSS Information
N/A
Vulnerability Type
N/A