Lucene search

K
osvGoogleOSV:GHSA-VHXC-FHM5-QCP9
HistoryMar 18, 2022 - 12:01 a.m.

Prototype Pollution in bodymen

2022-03-1800:01:11
Google
osv.dev
12
bodymen vulnerability
prototype pollution
handler function

EPSS

0.001

Percentile

40.2%

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a proto payload. Note: This vulnerability derives from an incomplete fix to CVE-2019-10792

EPSS

0.001

Percentile

40.2%

Related for OSV:GHSA-VHXC-FHM5-QCP9