Lucene search

K
nodejsAnonymousNODEJS:1697
HistoryMay 10, 2021 - 6:40 p.m.

Prototype Pollution

2021-05-1018:40:25
Anonymous
www.npmjs.com
19

0.001 Low

EPSS

Percentile

48.2%

Overview

simpl-schema before 1.10.2 is vulnerable to prototype pollution. Attacker controlled input into a schema could result in remote code execution within the scope of the surrounding application.

Recommendation

Upgrade to version 1.10.2 or later

References

CPENameOperatorVersion
simpl-schemalt1.10.2

0.001 Low

EPSS

Percentile

48.2%