Lucene search
+L

17 matches found

Github Security Blog
Github Security Blog
•added 2026/07/28 10:23 p.m.•15 views

Style Dictionary - Prototype Pollution in convertTokenData utility function

Impact Prototype pollution. A malicious user can create a token array key: 'proto.foo', value: 'malicious' , when processed by convertTokenData utility function, it will pollute the Object.prototype globally where .foo will equal key: 'proto.foo', value: 'malicious' . This has been confirmed with...

8.8CVSS5.9AI score0.00357EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder