Lucene search
GoogleOSV:GHSA-4G77-CVGW-GRVWHistoryFeb 05, 2022 - 12:00 a.m.
Prototype Pollution in putil-merge
2022-02-0500:00:31
Google
osv.dev
5
prototype pollution
putil-merge
vulnerability
security
attack
version 3.8.0
snyk
injection
EPSS
0.003
Percentile
66.0%
This affects the package putil-merge before 3.8.0. The merge() function does not check the values passed into the argument. An attacker can supply a malicious value by adjusting the value to include the constructor property. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-PUTILMERGE-1317077
Related
veracode
veracode
Prototype Pollution
2022-02-07 07:25:11
osv
osv
CVE-2021-23470
2022-02-04 20:15:00
cvelist
cvelist
CVE-2021-23470 Prototype Pollution
2022-02-04 20:05:12
cve
cve
CVE-2021-23470
2022-02-04 20:15:08
prion
prion
Hardcoded credentials
2022-02-04 20:15:00
github
github
Prototype Pollution in putil-merge
2022-02-05 00:00:31
nvd
nvd
CVE-2021-23470
2022-02-04 20:15:08