Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2021/11/23 9:15 p.m.38 views

Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS5.1AI score0.00235EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/11/23 9:15 p.m.27 views

GHSA-VPF5-82C8-9V36 Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS9.4AI score0.00235EPSS
Exploits1References5
OSV
OSV
added 2021/11/19 8:15 p.m.11 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS6.8AI score
Exploits0References3
NVD
NVD
added 2021/11/19 8:15 p.m.9 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS0.00235EPSS
Exploits1References3
Prion
Prion
added 2021/11/19 8:15 p.m.17 views

Design/Logic Flaw

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

6.8CVSS9.4AI score0.00235EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder