Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33584
HistoryJan 11, 2022 - 7:50 a.m.

Prototype Pollution

2022-01-1107:50:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.006 Low

EPSS

Percentile

78.2%

extend2 is vulnerable to prototype pollution. The vulnerability exists in extend function of index.js as it allows an attacker to pass the value __proto__ through the name variable.

CPENameOperatorVersion
extend2eq1.0.0
extend2eq1.0.0

0.006 Low

EPSS

Percentile

78.2%

Related for VERACODE:33584