WS-2018-0588

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

@afshin/custom404-extension (>=0.1.1, <=0.1.3), @apache-royale/cli (>=0.1.0, <=0.2.2) +516 more potentially affected by unknown CVE via querystringify (>=0.0.1, <=1.0.0)

querystringify NPM version =0.0.1, =0.1.1, =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.1.1, =0.5.0, =0.1.1-beta.0, =0.1.0, =0.1.0, =0.1.0, =1.1.1, =2.0.0, =3.2.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2018-0588...

Prototype Override

Overview Affected versions of querystringify are vulnerable to Prototype Override. If a malicious string is inserted in the query string, it will set the tostring method of the object to the true boolean. Recommendation Upgrade to version 2.0.0 or later References - WhiteSource Advisory - Snyk...

Prototype Pollution

querystringify is vulnerable to prototype pollution. Lack of validation allows an attacker to submit a query string that overrides the toString or proto function. This could potentially allow the attacker to execute arbitrary code...

GHSA-HXCM-V35H-MG2X Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...

PT-2019-20050

Name of the Vulnerable Software and Affected Versions querystringify versions prior to 2.0.0 Description A vulnerability was found in querystringify. It is possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string...