Lucene search

CVE-2022-21189 Prototype Pollution

🗓️ 01 May 2022 15:21:25Reported by snykType

CVE-2022-21189 Prototype Pollution in dexie packag

Reporter	Title	Published	Views	Family All 10
Veracode	Prototype Pollution	5 May 202216:48	–	veracode
OSV	CVE-2022-21189	1 May 202216:15	–	osv
OSV	Prototype Pollution in Dexie	3 May 202200:00	–	osv
Prion	Design/Logic Flaw	1 May 202216:15	–	prion
CVE	CVE-2022-21189	1 May 202216:15	–	cve
Github Security Blog	Prototype Pollution in Dexie	3 May 202200:00	–	github
NVD	CVE-2022-21189	1 May 202216:15	–	nvd
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202316:39	–	ibm
Tenable Nessus	Oracle Database Server (Jul 2023 CPU)	19 Jul 202300:00	–	nessus
Oracle	Oracle Critical Patch Update Advisory - July 2023	18 Jul 202300:00	–	oracle

[
  {
    "product": "dexie",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "3.2.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.0.0-alpha.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0-alpha.3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/dexie/Dexie.js/commit/1d655a69b9f28c3af6fae10cf5c61df387dc689b
snyk	www.snyk.io/vuln/SNYK-JS-DEXIE-2607042
github	www.github.com/dexie/Dexie.js/blob/fe682ef24568278c3b31d9d6c93de095d4b77ae8/src/functions/utils.ts%23L134-L164
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805308

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 May 2022 15:25Current

9.6High risk

Vulners AI Score9.6

CVSS37.3

EPSS0.008