WS-2020-0434

In objtools in versions 1.6.2 to 2.0.1 is vulnerable to Prototype pollution...

common-query (>=1.10.3, <=2.0.4), common-schema (>=1.8.0, <=2.0.2) +18 more potentially affected by unknown CVE via objtools (>=1.6.5, <=2.0.1)

objtools NPM version =1.6.5, =1.10.3, =1.8.0, =1.1.1, =1.0.0, =1.0.3, =0.1.0, =0.0.5, =1.4.3, =0.0.1, =0.6.14, =0.1.5, =0.2.1, =1.2.2, =2.2.5 and more Source cves: unknown CVE Source advisory: MEND:WS-2020-0434...

Prototype Pollution

objtools is vulnerable to prototype pollution. The vulnerability exists as it does not prevent the proto property to be set when .merge is called...

Node.js third-party modules: [objtools] Prototype pollution

I would like to report a prototype pollution vulnerability in objtools module. It allows an attacker to inject properties on Object.prototype. Module module name: objtools version: 2.0.1 npm page: https://www.npmjs.com/package/objtools Module Description objtools provides several utility function...