CVE-2022-22143
Prototype Pollution
Résumé
Prototype Pollution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. Note: This vulnerability derives from an incomplete fix of another vulnerability
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
convict
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.2.3"}]}]
Références
- advisory nvd.nist.gov
- advisory snyk.io
- advisory github.com
- patch github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web github.com
- web huntr.dev