CVE-2024-24293: Miguelcastillo Bit-Loader

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the M function e argument in index.js.

Affected products

• Miguelcastillo Bit-Loader: version 10.0.3 only

Published 2024-05-20. Last modified 2026-06-17.