Not rated
CVE-2018-16472 A prototype pollution attack in cached-path-relative…
Description
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cached-path-relative 1.0 | earliest → 1.0.1 | No fix stated |