Lucene search
+L

3 matches found

OSV
OSV
added 2021/11/23 9:15 p.m.50 views

GHSA-VPF5-82C8-9V36 Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS9.4AI score0.01561EPSS
SaveExploits1References5
NVD
NVD
added 2021/11/19 8:15 p.m.30 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS0.01561EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/11/19 7:20 p.m.5 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS5.6AI score0.01561EPSS
SaveExploits1References4
Rows per page
Query Builder