Lucene search

K
githubGitHub Advisory DatabaseGHSA-H466-J336-74WX
HistoryFeb 07, 2019 - 6:17 p.m.

Prototype Pollution in mpath

2019-02-0718:17:26
CWE-400
CWE-1321
GitHub Advisory Database
github.com
7

0.001 Low

EPSS

Percentile

41.8%

Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects.

Recommendation

Update to version 0.5.1 or later.

CPENameOperatorVersion
mpathlt0.5.1

0.001 Low

EPSS

Percentile

41.8%