alchemymvc (>=0.2.2, <=0.3.0), camo (>=0.1.1, <=0.12.1) +27 more potentially affected by CVE-2021-23395 via nedb (>=1.0.2, <=1.7.4)

nedb NPM version =1.0.2, =0.2.2, =0.1.1, =0.8.0, =0.0.2, =1.0.0, =0.12.0, =1.0.0, =1.0.0, =1.0.0-alpha.1, =1.0.1, =1.0.0, =1.0.0, =0.3.0, =0.9.1 and more Source cves: CVE-2021-23395 Source advisory: OSV:GHSA-339J-HQGX-QRRX...

CVE-2021-23395

This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a proto or constructor.prototype payload...

CVE-2021-23395

CVE-2021-23395 affects all versions of the Nedb package and describes a prototype pollution vulnerability. The issue allows an attacker to add or modify properties on Object.prototype via proto or constructor.prototype payloads, enabling potential DoS or remote code execution paths depending on t...

88slot-ap (1.0.0), @_koi/port (>=0.1.7-alpha, <=0.1.12-alpha) +1459 more potentially affected by CVE-2021-23395 via nedb (>=0.0.5, <=1.8.0)

nedb NPM version =0.0.5, =0.1.7-alpha, =2.2.0-beta.16, =0.2.2, =0.2.2, =0.4.9, =0.8.8, =1.1.12, =0.7.1, =1.0.0-alpha.108, =1.0.0-alpha.107, =1.0.0-alpha.5, =1.0.0-alpha.107, =1.0.2-alpha.23 and more Source cves: CVE-2021-23395 Source advisory: SNYK:JS-NEDB-1305279...