CVE-2024-38999
- Source
- https://cve.org/CVERecord?id=CVE-2024-38999
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-38999.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-38999
- Aliases
- Downstream
CGA (20)
- CGA-35gf-9cwr-83q3
- CGA-547c-w5x3-fmcr
- CGA-549g-42hf-x34j
- CGA-5j9v-hrfc-m43q
- CGA-75p4-qjfg-3222
- CGA-7v9j-vc62-x3mx
- CGA-8gw5-q535-72hx
- CGA-8wr8-656q-xg3q
- CGA-c459-r78p-7w85
- CGA-hv68-6fw4-qv2w
- CGA-m359-x668-45pg
- CGA-pj7v-26mv-vvfj
- CGA-ppp8-f6jv-2cwr
- CGA-rc4f-94cp-rqx8
- CGA-rq3v-4rj9-9mm6
- CGA-rwmh-8fwg-wq45
- CGA-rxxq-mjh2-j3jr
- CGA-w6vw-3hp2-hgvj
- CGA-x6ph-982f-xr7f
- CGA-x876-jx78-46h9
CLSA (1)
DEBIAN (1)
OESA (1)
SUSE (1)
UBUNTU (1)
- Related
- Withdrawn
- 2026-01-27T04:19:00Z
- Published
- 2024-07-01T13:15:05Z
- Modified
- 2026-07-17T21:02:50Z
- Summary
- [none]
- Details
-
jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
- References