jonschlinkert kayıtları
jonschlinkert üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2
- CWE-1333 Inefficient Regular Expression Complexity2
- CWE-1050 Excessive Platform Resource Consumption within a Loop1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2024-4068İstismar yok | Memory Exhaustion in bracesjonschlinkert · braces · CWE-1050 | Yüksek7,5 | — | %1,4 | 14 May 2024 |
30İzleyin | CVE-2026-33671Kavram kanıtı | Picomatch has a ReDoS vulnerability via extglob quantifiersjonschlinkert · picomatch · CWE-1333 | Yüksek7,5 | — | %0,4 | 26 Mar 2026 |
30İzleyin | CVE-2025-25975İstismar yok | An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys functionjonschlinkert · parse-git-config · CWE-200 | Yüksek7,5 | — | %0,4 | 12 Mar 2025 |
30İzleyin | CVE-2025-57328İstismar yok | toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objjonschlinkert · toggle-array · CWE-1321 | Yüksek7,5 | — | %0,3 | 24 Eyl 2025 |
21İzleyin | CVE-2024-4067İstismar yok | Regular Expression Denial of Service in micromatchjonschlinkert · micromatch · CWE-1333 | Orta5,3 | — | %1,4 | 14 May 2024 |
21İzleyin | CVE-2026-33672İstismar yok | Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matchingjonschlinkert · picomatch · CWE-1321 | Orta5,3 | — | %0,5 | 26 Mar 2026 |
- CVE-2024-406830İzleyin
Memory Exhaustion in braces
YüksekCVSS 7,5İstismar yokEPSS %1jonschlinkert · braces14 May 2024
- CVE-2026-3367130İzleyin
Picomatch has a ReDoS vulnerability via extglob quantifiers
YüksekCVSS 7,5Kavram kanıtıEPSS %0jonschlinkert · picomatch26 Mar 2026
- CVE-2025-2597530İzleyin
An issue in parse-git-config v.3.0.0 allows an attacker to obtain sensitive information via the expandKeys function
YüksekCVSS 7,5İstismar yokEPSS %0jonschlinkert · parse-git-config12 Mar 2025
- CVE-2025-5732830İzleyin
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other obj
YüksekCVSS 7,5İstismar yokEPSS %0jonschlinkert · toggle-array24 Eyl 2025
- CVE-2024-406721İzleyin
Regular Expression Denial of Service in micromatch
OrtaCVSS 5,3İstismar yokEPSS %1jonschlinkert · micromatch14 May 2024
- CVE-2026-3367221İzleyin
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
OrtaCVSS 5,3İstismar yokEPSS %0jonschlinkert · picomatch26 Mar 2026