Lucene search

K
osvGoogleOSV:GHSA-JJ58-488V-4RGF
HistoryJun 17, 2024 - 6:31 p.m.

obx Prototype Pollution

2024-06-1718:31:33
Google
osv.dev
2
almela obx software security

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

CPENameOperatorVersion
@almela/obxlt0.0.4

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for OSV:GHSA-JJ58-488V-4RGF