3 matches found
GHSA-3XGX-R9J4-QW9W Prototype Pollution in Dexie
Dexie is a minimalistic wrapper for IndexedDB. The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPathobj, keyPath, value function which does not properly check the keys being set like proto or constructor. This c...
7.3CVSS7.2AI score0.01684EPSS
SaveExploits1References6
20