simpl-schema is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as __proto__
, constructor
and prototype
.
CPE | Name | Operator | Version |
---|---|---|---|
simpl-schema | le | 1.10.1 | |
simpl-schema | le | 1.10.1 |