1 matches found
Prototype pollution in chart configuration and component i18n
The deep merge helpers in Vaadin Charts and in the i18n support of Vaadin components copy properties without filtering keys that address the prototype chain, so merging data the application does not control can add properties to Object.prototype and make them visible to every object in the runnin...
6.3CVSS5.7AI score0.00467EPSS
SaveExploits0Affected Software6
20