2 matches found
Prototype Pollution
@hapi/pez is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of multipart payloads, allowing an attacker to craft a part whose content becomes the payload object's prototype, which enables bypassing validation rules or causing exceptions when accessing the request...
3id-test-helper (>=1.0.0 <=1.0.4), 3nit-utils (>=0.24.0 <=0.30.0) +290 more potentially affected by unknown CVE via @hapi/pez (=4.1.2)
@hapi/pez NPM version =4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on @hapi/pez and may be impacted: - 3id-test-helper =1.0.0, =0.24.0, =6.8.2, =1.4.0, =0.1.0, =2.1.0, =2.5.0-next.11, =2.6.0, =2.1.0, =2.4.0, =2.1.0, =2.1.0, =2.4.0, =2.7.26 and...