Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2021/11/23 9:15 p.m.41 views

Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS5.1AI score0.01561EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/11/23 9:15 p.m.27 views

GHSA-VPF5-82C8-9V36 Prototype Pollution in algoliasearch-helper

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS9.4AI score0.01561EPSS
Exploits1References5
NVD
NVD
added 2021/11/19 8:15 p.m.11 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS0.01561EPSS
Exploits1References3
OSV
OSV
added 2021/11/19 8:15 p.m.13 views

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

9.8CVSS6.8AI score
Exploits0References3
Prion
Prion
added 2021/11/19 8:15 p.m.26 views

Design/Logic Flaw

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters.parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the...

6.8CVSS9.4AI score0.01561EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder