Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 1:28 p.m.18 views

form-data-objectizer: Prototype pollution in form-data-objectizer via bracket-notation form keys

Summary form-data-objectizer walks bracket-notation form keys e.g. namesub into nested objects without filtering proto, constructor, or prototype. A single HTTP form field whose name starts with proto... causes the library to mutate Object.prototype, which is a prototype pollution primitive of th...

8.2CVSS5.8AI score0.00282EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder