~ / search / GHSA-8h84-8j4f-p97q

GHSA-8h84-8j4f-p97q

Injection in bodymen

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10792

Packages

EcosystemPackageAffectedFixed in
npm bodymen < 1.1.1 1.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

References

External links from the advisory. They lead to third-party sites.