Lucene search

K
osvGoogleOSV:GHSA-J9CF-PR2X-5273
HistoryFeb 09, 2022 - 10:33 p.m.

Prototype Pollution in dot-object

2022-02-0922:33:31
Google
osv.dev
9
dot-object
2.1.3
prototype pollution
vulnerability
set function
__proto__ payload
software

EPSS

0.001

Percentile

31.9%

dot-object before 2.1.3 is vulnerable to Prototype Pollution. The set function could be tricked into adding or modifying properties of Object.prototype using a proto payload.

EPSS

0.001

Percentile

31.9%

Related for OSV:GHSA-J9CF-PR2X-5273