CVE-2024-57078

Summary

CVE-2024-57078 is a prototype pollution vulnerability affecting the lib.merge function in cli-util version 1.1.27. attackers can exploit this issue by supplying a specially crafted payload, causing a Denial of Service (DoS) condition. This vulnerability allows an attacker to manipulate the prototype chain, resulting in memory corruption and potentially crashing the application. Users are strongly advised to update to the latest version of cli-util to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.