Lucene search

K
osvGoogleOSV:GHSA-PFV6-PRQM-85Q8
HistoryApr 16, 2022 - 12:00 a.m.

Prototype Pollution in madlib-object-utils

2022-04-1600:00:26
Google
osv.dev
11
prototype pollution
setvalue method
object prototypes

EPSS

0.007

Percentile

79.8%

The package madlib-object-utils before version 0.1.8 is vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. Note: This vulnerability derives from an incomplete fix of CVE-2020-7701

EPSS

0.007

Percentile

79.8%

Related for OSV:GHSA-PFV6-PRQM-85Q8