Skip to content
OpenAdvisories

Vendor

Clever

2 known vulnerabilities.

Products

underscore.deep 1 saml2-js 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2022-31106

    Prototype Pollution in underscore.deep

    Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of `underscore.deep` prior to version 0.5.3 are vulnerable to a prototype pollution vulnerability. An attacker can craft a malicious payload and pass it to `deepFrom…

    Clever underscore.deep
  • High 7.7
    CVE-2017-11429

    Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

    Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to …

    Clever saml2-js saml2-js npm