CVE-2022-22143
Prototype Pollution
Summary
Prototype Pollution
Original description
The description as published by the source.
The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. Note: This vulnerability derives from an incomplete fix of another vulnerability
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
convict
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.3"}]}]
References
- advisory nvd.nist.gov
- advisory snyk.io
- advisory github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web huntr.dev