1 matches found
`@orpc/client` has Prototype Pollution via `StandardRPCJsonSerializer` Deserialization
Summary A critical Prototype Pollution vulnerability exists in the RPC JSON deserializer of the @orpc/client package. The vulnerability allows unauthenticated, remote attackers to inject arbitrary properties into the global Object.prototype. Because this pollution persists for the lifetime of the...
9.8CVSS6.4AI score0.0091EPSS
SaveExploits1References4Affected Software1
20