4 matches found
Prototype Override
Overview Affected versions of querystringify are vulnerable to Prototype Override. If a malicious string is inserted in the query string, it will set the tostring method of the object to the true boolean. Recommendation Upgrade to version 2.0.0 or later References - WhiteSource Advisory - Snyk...
Prototype Pollution
querystringify is vulnerable to prototype pollution. Lack of validation allows an attacker to submit a query string that overrides the toString or proto function. This could potentially allow the attacker to execute arbitrary code...
Prototype Pollution in querystringify
A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...
GHSA-HXCM-V35H-MG2X Prototype Pollution in querystringify
A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...