213 matches found
Valibot: record() issue paths can make flatten() throw for inherited Object property names
Summary valibot 1.4.1 can throw a TypeError inside its flatten helper when validation issues contain attacker-controlled object keys such as toString, valueOf, or hasOwnProperty. The issue is reachable through normal record validation. record intentionally filters proto, prototype, and constructo...
6.9CVSS5.9AI score0.00524EPSS
SaveExploits0References5Affected Software1
20