Lucene search
+L

1 matches found

OSV
OSV
added 2023/01/10 9:50 p.m.36 views

GHSA-4JRM-C32X-W4JF convict vulnerable to Prototype Pollution

Impact An attacker can inject attributes that are used in other components An attacker can override existing attributes with ones that have incompatible type, which may lead to a crash. The main use case of Convict is for handling server-side configurations written by the admins owning the server...

8.6CVSS6AI score0.00275EPSS
SaveExploits1References5
Rows per page
Query Builder