Lucene search
Veracode Vulnerability DatabaseVERACODE:37046HistorySep 16, 2022 - 4:28 a.m.
Prototype Pollution
2022-09-1604:28:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
steal
prototype pollution
vulnerability
npm convert.js
EPSS
0.005
Percentile
76.6%
steal is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the convertLater function of npm-convert.js and modify attributes such as __proto__, constructor, and prototype.
Related
prion
prion
Code injection
2022-09-15 13:15:00
nvd
nvd
CVE-2022-37257
2022-09-15 13:15:09
osv
osv
CVE-2022-37257
2022-09-15 13:15:09
steal vulnerable to Prototype Pollution via requestedVersion variable
2022-09-16 00:00:39
cvelist
cvelist
CVE-2022-37257
2022-09-15 12:30:55
github
github
steal vulnerable to Prototype Pollution via requestedVersion variable
2022-09-16 00:00:39
cve
cve
CVE-2022-37257
2022-09-15 13:15:09