Prototype Pollution

2023-01-0508:07:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

prototype pollution

software vulnerability

core.js

0.004 Low

EPSS

Percentile

72.6%

JSON

fast-json-patch is vulnerable to prototype pollution. The vulnerability exists in the applyOperation function of core.js, due to the improper checks for the key variable which allows an attacker to modify object prototype attributes.

CPENameOperatorVersion
fast-json-patchle3.1.0
fast-json-patchle3.1.0
fast-json-patchle3.1.0
fast-json-patchle2.0.7
fast-json-patchle3.1.0
fast-json-patchle3.1.0
fast-json-patchle3.1.0
fast-json-patchle2.0.7

Name	Operator	Version
fast-json-patch	le	3.1.0
fast-json-patch	le	3.1.0
fast-json-patch	le	3.1.0
fast-json-patch	le	2.0.7
fast-json-patch	le	3.1.0
fast-json-patch	le	3.1.0
fast-json-patch	le	3.1.0
fast-json-patch	le	2.0.7