Lucene search
+L

2 matches found

OSV
OSV
added 2025/12/09 5:11 p.m.8 views

GHSA-HXJ9-33PP-J2CC Elysia vulnerable to prototype pollution with multiple standalone schema validation

Prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to the ordering of merging, there must be an any type that is set as a standalone guard, to allow for the proto prop to be merged. When combined with GHSA-8vch-m3f4-q8jf...

9.1CVSS5.9AI score0.00788EPSS
SaveExploits2References8
Github Security Blog
Github Security Blog
added 2025/12/09 5:11 p.m.16 views

Elysia vulnerable to prototype pollution with multiple standalone schema validation

Prototype pollution vulnerability in mergeDeep after merging results of two standard schema validations with the same key. Due to the ordering of merging, there must be an any type that is set as a standalone guard, to allow for the proto prop to be merged. When combined with GHSA-8vch-m3f4-q8jf...

9.8CVSS6.7AI score0.00543EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder