Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/05/18 4:43 p.m.17 views

NPM: parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names

NPM: parse-nested-form-data has Prototype Pollution via proto in FormData field names vulnerability discovered by ? in WordPress Npm parse-nested-form-data versions = 1.0.0...

8.2CVSS5.8AI score0.00315EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2026/02/23 7:24 p.m.10 views

Prototype Pollution

@trpc/server is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of FormData field names in the formDataToObject function, which allows an attacker to submit specially crafted fields that pollute Object.prototype and potentially cause authorization bypass or denial...

8.5CVSS5.5AI score0.00338EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder