CVE-2022-46175

A flaw was found in the json5 package. The affected version of the json5 package could allow an attacker to set arbitrary and unexpected keys on the object returned from JSON5.parse...

DEBIAN-CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

Cross site scripting

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175: Improperly Controlled Modification of Object Prototype Attributes

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The "parse" method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named "proto", allowing specially crafted strin...

02vue_toast_demo (>=1.0.0, <=1.0.4), 06demo-1 (1.0.0) +55717 more potentially affected by CVE-2022-46175 via json5 (>=0.1.0, <=1.0.1)

json5 NPM version =0.1.0, =1.0.0, =1.0.4 - 06demo-1 1.0.0 - 0726react 0.1.1 - 08cms 1.0.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

6ix (0.0.0-canary.0), 9ight (>=0.0.0-canary.0, <=0.0.0-canary.6) +800 more potentially affected by CVE-2022-46175 via json5 (>=2.0.0, <=2.2.1)

json5 NPM version =2.0.0, =0.0.0-canary.0, =0.4.0, =0.0.1, =0.0.1, =0.0.1, =1.2.0, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.3.0-next.1, =0.0.2, =0.0.2, =1.1.0, =1.2.1 and more Source cves: CVE-2022-46175 Source advisory: MEND:CVE-2022-46175...

CVE-2022-46175

CVE-2022-46175 (JSON5 Prototype Pollution) The JSON5 library up to v1.0.1 and v2.2.1 fails to restrict keys named proto in JSON5.parse, enabling prototype pollution on the returned object. This can lead to arbitrary keys on the polluted object and, depending on usage, may cause denial of service,...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

CVE-2022-46175

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand e.g. for config files. The parse method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named proto, allowing specially crafted strings t...

PT-2022-7147

Name of the Vulnerable Software and Affected Versions json5 versions 1.0.1 and earlier json5 versions 2.2.1 and earlier Description The parse method of the json5 library does not restrict parsing of keys named proto , allowing specially crafted strings to pollute the prototype of the resulting...