Vulnerabilidades de Stalniy

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Stalniy: 1 registro(s), com severidade, exploração e correções.

@casl/ability 1

Somente exploradas (KEV) →

CVE-2026-111172 Média · 5.3 CWE-1321 15/10/2026

@casl/ability 6.7.5 before 7.0.2 Prototype Pollution via rulesToFields setByPath

@casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys. Attackers controlling rule conditions can supply keys like 'toString.call' to alter shared builtin functions process-wide, causing denial of service for the Node.js process.