Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27576
HistoryOct 14, 2020 - 5:13 a.m.

Prototype Pollution

2020-10-1405:13:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

merge is vulnerable to prototype pollution. A bypass of the fix for CVE-2018-16469 exists and allows arbitrary properties of the Object prototype to be added or modified via JSON.parse.