Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/09/08 8:55 p.m.12 views

joi: Prototype pollution via a `__proto__` language key in custom messages

Impact An application that passes attacker-controlled data into joi's custom message configuration messages, message, prefs messages , Joi.extend messages or rule message lets the attacker write properties onto Object.prototype, where every object in the process then inherits them. A key named...

3.7CVSS5.8AI score0.00389EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder