Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/06 5:32 p.m.31 views

mcp-data-vis vulnerable to denial of service via unsanitized `select` key lookup on `Object.prototype` with `precompile: true`

Summary icu-minify's runtime formatter resolves select branches by looking up the runtime value as a plain property on a prototype-bearing object. When the value coerces to a key that exists on Object.prototype e.g. toString, proto, constructor, hasOwnProperty, valueOf, the lookup returns a truth...

6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder