Lucene search
+L

2 matches found

Patchstack
Patchstack
•added 2026/05/18 4:43 p.m.•35 views

NPM: parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names

NPM: parse-nested-form-data has Prototype Pollution via proto in FormData field names vulnerability discovered by ? in WordPress Npm parse-nested-form-data versions = 1.0.0...

8.2CVSS5.8AI score0.00562EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2026/02/23 7:24 p.m.•17 views

Prototype Pollution

@trpc/server is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of FormData field names in the formDataToObject function, which allows an attacker to submit specially crafted fields that pollute Object.prototype and potentially cause authorization bypass or denial...

8.5CVSS6AI score0.00397EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder