AI Score
Confidence
High
EPSS
Percentile
72.4%
This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload.
github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348
snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747