Lucene search
+L

65 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/15 12:00 a.m.•1 views

CVE-2026-48714: Improperly Controlled Modification of Object Prototype Attributes

i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno. In versions prior to 3.9.7, the missingKeyHandler blocked the literal request-body keys proto, constructor, and prototype added in 3.9.3, see GHSA-5fgg-jcpf-8jjw, but did not...

9.1CVSS5.8AI score0.00657EPSS
SaveExploits0References4
Rows per page
Query Builder