17 matches found
Style Dictionary - Prototype Pollution in convertTokenData utility function
Impact Prototype pollution. A malicious user can create a token array key: 'proto.foo', value: 'malicious' , when processed by convertTokenData utility function, it will pollute the Object.prototype globally where .foo will equal key: 'proto.foo', value: 'malicious' . This has been confirmed with...
8.8CVSS5.9AI score0.00357EPSS
SaveExploits0References7Affected Software1
20