Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/03 4:04 a.m.13 views

Signal K Server: Arbitrary Prototype Read via `from` Field Bypass

Summary The /signalk/v1/applicationData/... JSON-patch endpoint allows users to modify stored application data. To prevent Prototype Pollution, the developers implemented an isPrototypePollutionPath guard. However, this guard only checks the path property of incoming JSON-patch objects. It...

6.5CVSS6.5AI score0.00309EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder