CVE-2021-23395

This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a proto or constructor.prototype payload...

CVE-2021-23395

CVE-2021-23395 affects all versions of the Nedb package and describes a prototype pollution vulnerability. The issue allows an attacker to add or modify properties on Object.prototype via proto or constructor.prototype payloads, enabling potential DoS or remote code execution paths depending on t...