Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

Akbr update 1.0.0: Data Tampering in Update Process

CVE-2024-36578 · published 2 years ago
Summary

An attacker can manipulate data in the update process of Akbr 1.0.0, potentially leading to unintended behavior or security breaches. This issue affects users who rely on Akbr for software updates. To protect your system, consider updating to a patched version or using an alternative update mechanism.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
npm akbr update <= 1.0.0
Original advisory text
akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.
akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
5.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-1321Prototype Pollution
Timeline
Published17 Jun 2024
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-mj4p-gmhr-92g3 · GHSA
CVE-2024-36578 · NVD
Track software like this
Free during beta