Logo
Retour à la veille

CVE-2026-61834

Publié : 23 septembre 2026
Modifié : 23 septembre 2026
Lien officiel NVD
Score CVSS
4.3
MEDIUM

Description détaillée

scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the dotted value keys beginning with an inherited property such as toString can therefore traverse into a shared built-in function object and add attacker-controlled properties, causing process-global mutation that may affect application logic reading inherited-method properties. This issue is fixed in version 0.9.2.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Références et Patchs

https://github.com/thomaspoignant/scim-patch/commit/c86474f7a9b16191d939f59ba94eca6c6e63044bhttps://github.com/thomaspoignant/scim-patch/pull/1127https://github.com/thomaspoignant/scim-patch/releases/tag/v0.9.2https://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-2mhw-wcx5-v3xjhttps://github.com/thomaspoignant/scim-patch/security/advisories/GHSA-2mhw-wcx5-v3xj

Dernières Vulnérabilités

CVE-2026-91775

LimeSurvey fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import warnings, resulting in XSS in the administrative interface.

VOIR DÉTAILS

CVE-2026-88840

BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.

VOIR DÉTAILS

CVE-2026-88839

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

VOIR DÉTAILS