Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37825
HistoryNov 07, 2022 - 7:05 p.m.

Prototype Pollution

2022-11-0719:05:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
prototype pollution
deep-parse-json
remote attacker
object properties

0.001 Low

EPSS

Percentile

37.0%

deep-parse-json is vulnerable to prototype pollution. The library improperly validates the incoming JSON keys, which allows a remote attacker to add new properties to an object through __proto__ attribute.

0.001 Low

EPSS

Percentile

37.0%

Related for VERACODE:37825