CVE-2019-10792
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototy...
Summary
Injection in bodymen
Original description
The description as published by the source.
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a proto payload.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
bodymen
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]
References
- advisory nvd.nist.gov
- patch github.com
- report snyk.io