2 matches found
NPM: parse-nested-form-data has Prototype Pollution via `__proto__` in FormData field names
NPM: parse-nested-form-data has Prototype Pollution via proto in FormData field names vulnerability discovered by ? in WordPress Npm parse-nested-form-data versions = 1.0.0...
8.2CVSS5.8AI score0.00315EPSS
SaveExploits0References4Affected Software1
Prototype Pollution
@trpc/server is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of FormData field names in the formDataToObject function, which allows an attacker to submit specially crafted fields that pollute Object.prototype and potentially cause authorization bypass or denial...
8.5CVSS5.5AI score0.00338EPSS
SaveExploits0References3Affected Software1
20