Prototype Pollution in mithril

Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as proto%5BtoString%5D=123 in...

Prototype Pollution

Overview Affected versions of mithrilare vulnerable to prototype pollution. The function parseQueryString may allow a malicious user to modify the prototype of Object, causing the addition or modification of an existing property that will exist on all objects. A payload such as...

Prototype Pollution

Overview org.webjars:mithril is a modern client-side JavaScript framework for building Single Page Applications and provides routing and XHR utilities out of the box. Affected versions of this package are vulnerable to Prototype Pollution. parseQueryString may allow a malicious user to modify the...