CVE-2019-10792
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototy...
Résumé
Injection in bodymen
Description d'origine
La description telle que publiée par la source (souvent en anglais).
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a proto payload.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
bodymen
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.1.1"}]}]
Références
- advisory nvd.nist.gov
- patch github.com
- report snyk.io