Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
•added 2022/01/27 2:27 p.m.•42 views

Prototype Pollution in cached-path-relative

The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

9.8CVSS2.1AI score0.01943EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/01/27 2:27 p.m.•205 views

GHSA-WG6G-PPVX-927H Prototype Pollution in cached-path-relative

The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

7.3CVSS9.3AI score0.01943EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2022/01/21 8:05 p.m.•55 views

CVE-2021-23518 Prototype Pollution

The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

7.3CVSS9.6AI score0.01943EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/21 8:05 p.m.•8 views

CVE-2021-23518

The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

9.8CVSS0.01943EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•3 views

CVE-2021-23518: Improperly Controlled Modification of Object Prototype Attributes

The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

9.8CVSS7.8AI score0.01943EPSS
SaveExploits1References2
Rows per page
Query Builder