Prototype Pollution

Overview org.webjars.bower:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

Prototype Pollution

Overview org.webjars.npm:underscore-contrib is an underscore-contrib ================== Affected versions of this package are vulnerable to Prototype Pollution through the lib.fromQuery function. An attacker can disrupt service by supplying a crafted payload with Object.prototype setter to...

underscore-contrib 安全漏洞

underscore-contrib is an open source application from DocumentCloud. A security vulnerability exists in underscore-contrib version v0.3.0, which stems from the lib.fromQuery function containing a prototype contamination vulnerability...