CVE-2019-10792
Injection in bodymen
Résumé
Injection in bodymen
Description d'origine
La description telle que publiée par la source (souvent en anglais).
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a proto payload.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
bodymen
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web snyk.io