Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/01/27 2:27 p.m.32 views

Prototype Pollution in cached-path-relative

The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

9.8CVSS2.1AI score0.01943EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/01/27 2:27 p.m.31 views

GHSA-WG6G-PPVX-927H Prototype Pollution in cached-path-relative

The package cached-path-relative before 1.1.0 is vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

7.3CVSS9.3AI score0.01943EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2022/01/21 8:5 p.m.41 views

CVE-2021-23518 Prototype Pollution

The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...

7.3CVSS9.6AI score0.01943EPSS
SaveExploits1References4
Rows per page
Query Builder