Prototype Pollution

🗓️ 20 Jun 2019 14:35:11Reported by Jon SchlinkertType

Vulnerability in `set-value` function allows Prototype Pollution by not validating Object properties, leading to unauthorized modification of Object prototypes. Upgrade to version 3.0.1 or 2.0.1.

Reporter	Title	Published	Views	Family All 69
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI	6 Oct 202204:09	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Automation Manager - Node.js (CVE-2019-10747)	15 May 202312:07	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js modules	29 Aug 202008:56	–	ibm
AlmaLinux	Moderate: nodejs:12 security update	16 Feb 202107:34	–	almalinux
BDU FSTEC	The vulnerability of the set function in the set-value library of the Afroara Application Software Center, related to uncontrolled changes in object prototypes’ attributes, allows attackers to execute a “prototype pollution” attack.	9 Jun 202100:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : nodejs:12 (CESA-2021:0549)	11 Mar 202100:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: nodejs-nodemon / nodejs-packaging Multiple Vulnerabilities (crlsa-2021_0549)	1 Oct 202600:00	–	nessus