Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/11 10:11 p.m.9 views

yayson: Prototype pollution in Store/LegacyStore deserialization

Summary Store/LegacyStore key internal lookup tables by the type, id, and relationship names from a JSON:API document. Because these were plain objects, a document with type: "proto" writes onto Object.prototype, polluting every object in the process. Severity Suggested CVSS v3.1...

SaveExploits0References2Affected Software1
Rows per page
Query Builder