Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/04/03 4:04 a.m.•19 views

Signal K Server: Arbitrary Prototype Read via `from` Field Bypass

Summary The /signalk/v1/applicationData/... JSON-patch endpoint allows users to modify stored application data. To prevent Prototype Pollution, the developers implemented an isPrototypePollutionPath guard. However, this guard only checks the path property of incoming JSON-patch objects. It...

6.5CVSS6.4AI score0.00411EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder