Lucene search
+L

3 matches found

OSV
OSV
added 2022/05/03 12:0 a.m.3 views

GHSA-3XGX-R9J4-QW9W Prototype Pollution in Dexie

Dexie is a minimalistic wrapper for IndexedDB. The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPathobj, keyPath, value function which does not properly check the keys being set like proto or constructor. This c...

7.3CVSS7.2AI score0.01684EPSS
SaveExploits1References6
Rows per page
Query Builder