Lucene search
Veracode Vulnerability DatabaseVERACODE:37133HistorySep 19, 2022 - 8:50 a.m.
Prototype Pollution
2022-09-1908:50:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
steal
prototype pollution
injection
convertlater
npm-convert.js
0.003 Low
EPSS
Percentile
65.4%
steal is vulnerable to prototype pollution. An attacker can inject properties into existing construct prototypes via the convertLater function of npm-convert.js and modify attributes such as __proto__, constructor, and prototype.
Related
cvelist
cvelist
CVE-2022-37258
2022-09-16 20:57:18
nvd
nvd
CVE-2022-37258
2022-09-16 22:15:12
cve
cve
CVE-2022-37258
2022-09-16 22:15:12
osv
osv
CVE-2022-37258
2022-09-16 22:15:12
steal vulnerable to Prototype Pollution
2022-09-17 00:00:30
github
github
steal vulnerable to Prototype Pollution
2022-09-17 00:00:30
veracode
veracode
Prototype Pollution
2022-09-19 08:27:28
prion
prion
Code injection
2022-09-16 22:15:00