Lucene search

K
cvelistSnykCVELIST:CVE-2022-25878
HistoryMay 27, 2022 - 12:00 a.m.

CVE-2022-25878 Prototype Pollution

2022-05-2700:00:00
snyk
raw.githubusercontent.com
1

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype. This vulnerability can occur in multiple ways: 1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption functions 2. by parsing/loading .proto files

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%