Lucene search
+L

2 matches found

Patchstack
Patchstack
added 2026/09/11 10:11 p.m.7 views

NPM: yayson: Prototype pollution in Store/LegacyStore deserialization

NPM: yayson: Prototype pollution in Store/LegacyStore deserialization vulnerability discovered by ? in WordPress Npm yayson versions = 4.2.0...

SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2026/09/11 10:11 p.m.9 views

yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

SaveExploits0References2Affected Software1
Rows per page
Query Builder