CVE-2020-7600

The CVE-2020-7600 entry concerns the Node.js package querymen, where versions prior to 2.1.4 are vulnerable to Prototype Pollution. The vulnerability arises from the ability to control the parameters of the exported function handler(type, name, fn) without proper sanitization, enabling an attacke...

CVE-2022-25871

Summary (CVE-2022-25871) : Affects the Node.js middleware querymen . It allows Prototype Pollution through the parameters of the exported function handler(type, name, fn) when user-controlled input is not sanitized; this stems from an incomplete fix of CVE-2020-7600. The CVE entry notes the vulne...