Prototype Pollution

2021-02-0504:28:39

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

57.4%

JSON

decal is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as __proto__, constructor and prototype.

CPENameOperatorVersion
decalle2.1.3

CPE	Name	Operator	Version
	decal	le	2.1.3

References

github.com/gigafied/decal.js/blob/fdc046691f00021f0e65a593a11b670e265f0a00/src/utils/set.js#L47

github.com/gigafied/decal.js/blob/master/src/utils/set.js%23L45-L73

www.npmjs.com/package/decal

0.002 Low

EPSS

Percentile

57.4%

JSON

Related for VERACODE:29280