~ / search / GHSA-4xcx-cwrq-w792

GHSA-4xcx-cwrq-w792

Prototype Pollution in NASA Open MCT

Source: GitHub Advisory Database (reviewed) High CVE-2023-45282

Packages

EcosystemPackageAffectedFixed in
npm openmct <= 3.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In NASA Open MCT (aka openmct) before commit 545a177 is subject to a prototype pollution which can occur via an import action.

References

External links from the advisory. They lead to third-party sites.