Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-BA50AEEFFF1ADC387BDBC12BA68CB0F4

HistoryJun 17, 2024 - 12:00 a.m.

flatten-json Prototype Pollution

2024-06-1700:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

prototype pollution

flatten-json

arbitrary code

security issue

module.exports.

7.6 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflattenJSON (flatten-json/index.js:42)

Affected configurations

Vulners

Node

npmflatten-jsonRange≤1.0.1

CPENameOperatorVersion
npm/@allanlancioni/flatten-jsonle1.0.1

CPE	Name	Operator	Version
	npm/@allanlancioni/flatten-json	le	1.0.1

References

gist.github.com/mestrtee/d5a0c93459599f77557b5bbe78b57325

github.com/advisories/GHSA-j8px-pjmp-325f

github.com/AllanLancioni/flatten-json

nvd.nist.gov/vuln/detail/CVE-2024-36574