Lucene search
+L

3 matches found

OSV
OSV
•added 2022/05/03 12:00 a.m.•8 views

GHSA-3XGX-R9J4-QW9W Prototype Pollution in Dexie

Dexie is a minimalistic wrapper for IndexedDB. The package dexie before 3.2.2, from 4.0.0-alpha.1 and before 4.0.0-alpha.3 are vulnerable to Prototype Pollution in the Dexie.setByKeyPathobj, keyPath, value function which does not properly check the keys being set like proto or constructor. This c...

7.3CVSS7.2AI score0.0171EPSS
SaveExploits1References6
Rows per page
Query Builder