VULNERABILITY INTELLIGENCE

CVE-2024-39018

CVSS score6.3 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2024-07-01

Last modified2026-06-17

Description

harvey-woo cat5th/key-serializer v0.2.5 was discovered to contain a prototype pollution via the function "query". This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.