CVE-2021-4307

creationtimestamp| type| source ---|---|--- 2023-01-07 22:26:17+00:00| seen| https://t.me/cibsecurity/56127...

@egeria/egeria (>=0.20.1, <=0.23.10), deepsalter (>=0.7.0, <=2.6.4) +6 more potentially affected by CVE-2021-4307 via baobab (>=2.0.0-dev10, <=2.5.2)

baobab NPM version =2.0.0-dev10, =0.20.1, =0.7.0, =0.0.1, =0.0.58, =0.20.0, =0.0.8, =0.1.2 Source cves: CVE-2021-4307 Source advisory: OSV:GHSA-WVR2-Q86M-6WHP...

@egeria/egeria (>=0.20.1, <=0.23.10), appstate (>=0.0.1, <=0.0.2) +8 more potentially affected by CVE-2021-4307 via baobab (>=0.2.2, <=2.5.2)

baobab NPM version =0.2.2, =0.20.1, =0.0.1, =0.7.0, =0.0.1, =0.0.58, =0.20.0, =0.0.8, =2.1.2, =2.6.0 Source cves: CVE-2021-4307 Source advisory: MEND:CVE-2021-4307...

CVE-2021-4307

CVE-2021-4307 affects the Baobab data tree (Yomguithereal Baobab) up to version 2.6.0. The issue is a prototype pollution vulnerability: an attacker can manipulate object prototype attributes via a vulnerable function (merger), enabling remote impact on object prototypes. Affected functionality i...