CVE-2021-42581: Improperly Controlled Modification of Object Prototype Attributes

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object that contains an own property "proto" as an argument to the function. NOTE: the vendor disputes this because the observe...

PT-2022-11625 · Ramda · Ramda

Name of the Vulnerable Software and Affected Versions: Ramda versions 0.27.0 and earlier Description: The issue allows attackers to compromise the integrity or availability of an application by supplying a crafted object that contains an own property proto as an argument to the mapObjIndexed...