~ / search / GHSA-pwm7-qr6j-3vjg

GHSA-pwm7-qr6j-3vjg

Prototype Pollution in realms-shim

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-23594

Packages

EcosystemPackageAffectedFixed in
npm realms-shim <= 1.2.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector.

References

External links from the advisory. They lead to third-party sites.