~ / search / GHSA-339j-hqgx-qrrx

GHSA-339j-hqgx-qrrx

Prototype Pollution in nedb

Source: GitHub Advisory Database (reviewed) High CVE-2021-23395

Packages

EcosystemPackageAffectedFixed in
npm nedb <= 1.8.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.

References

External links from the advisory. They lead to third-party sites.