Lucene search

K

Algoliasearch-Helper Security Vulnerabilities - May

cve
cve

CVE-2021-23433

The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementa...

9.8CVSS

9.4AI Score

0.003EPSS

2021-11-19 08:15 PM
31