GHSA-prv2-xwr7-hr57
Uncontrolled Resource Consumption in rdf-graph-array
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | rdf-graph-array | <= 0.3.0-rc6 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
rdf-graph-array through 0.3.0-rc6 manipulation of JavaScript objects resutling in Prototype Pollution. The rdf.Graph.prototype.add method could be tricked into adding or modifying properties of Object.prototype.
References
External links from the advisory. They lead to third-party sites.