Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2021-23568

Disclosure Date: January 10, 2022 (last updated February 23, 2025)
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge.
Attacker Value
Unknown

CVE-2018-3786

Disclosure Date: August 24, 2018 (last updated November 27, 2024)
A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.