Prototype Pollution in locutus

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-7719 · ADVISORY
• kvz/locutus#418 · WEB
• locutusjs/locutus commit 0eb16d8 · WEB
• kvz/locutus · PACKAGE
• snyk.io/vuln/SNYK-JS-LOCUTUS-598675 · WEB
• kvz/locutus#418 · Exploit

locutus のその他の脆弱性

• CVE-2026-33994緊急 9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Starting in version 2.0.39 and prior to versio…
• CVE-2026-33993緊急 9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.25, the `unserialize()` f…
• CVE-2026-32304緊急 9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to 3.0.14, the create_function(args, cod…
• CVE-2026-29091高 8.1Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code executio…
• CVE-2026-25521高 8.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. In versions from 2.0.12 to before 2.0.39, a pr…