Lucene search

K
nodejsCristian-Alexandru StaicuNODEJS:779
HistoryFeb 06, 2019 - 12:59 a.m.

Prototype Pollution

2019-02-0600:59:55
Cristian-Alexandru Staicu
www.npmjs.com
7

0.001 Low

EPSS

Percentile

42.0%

Overview

Versions of mpath before 0.5.1 are vulnerable to prototype pollution. Provided certain input mpath can add or modify properties of the Object prototype. These properties will be present on all objects.

Recommendation

Update to version 0.5.1 or later.

References

CPENameOperatorVersion
mpathlt0.5.1

0.001 Low

EPSS

Percentile

42.0%