17 matches found
GHSA-VJ5C-M527-MPFF Style Dictionary - Prototype Pollution in convertTokenData utility function
Impact Prototype pollution. A malicious user can create a token array key: 'proto.foo', value: 'malicious' , when processed by convertTokenData utility function, it will pollute the Object.prototype globally where .foo will equal key: 'proto.foo', value: 'malicious' . This has been confirmed with...
8.8CVSS5.8AI score0.00357EPSS
SaveExploits0References7
20