Lucene search
Veracode Vulnerability DatabaseVERACODE:29692HistoryMar 15, 2021 - 4:31 a.m.
Prototype Pollution
2021-03-1504:31:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
msgpack5
vulnerability
prototype pollution
attacker
inject properties
modify attributes
software
EPSS
0.009
Percentile
82.4%
msgpack5 is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as __proto__, constructor and prototype.
References
github.com/advisories/GHSA-gmjw-49p4-pcfm
github.com/mcollina/msgpack5/commit/d4e6cb956ae51c8bb2828e71c7c1107c340cf1e8
github.com/mcollina/msgpack5/releases/tag/v3.6.1
github.com/mcollina/msgpack5/releases/tag/v4.5.1
github.com/mcollina/msgpack5/releases/tag/v5.2.1
github.com/mcollina/msgpack5/security/advisories/GHSA-gmjw-49p4-pcfm
www.npmjs.com/advisories/1651
www.npmjs.com/package/msgpack5
Related
cvelist
cvelist
CVE-2021-21368 Prototype poisoning
2021-03-12 17:00:19
prion
prion
Code injection
2021-03-12 17:15:00
nvd
nvd
CVE-2021-21368
2021-03-12 17:15:12
osv
osv
CVE-2021-21368
2021-03-12 17:15:12
Prototype poisoning
2021-03-12 22:44:17
github
github
Prototype poisoning
2021-03-12 22:44:17
cve
cve
CVE-2021-21368
2021-03-12 17:15:12
nodejs
nodejs
Prototype Poisoning
2021-03-12 22:58:56
