Not rated
CVE-2018-16472 A prototype pollution attack in cached-path-relative…
Description
A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| cached-path-relative 1.0 | earliest → 1.0.1 | No fix stated |
References
- hackerone.com hackerone.com
- [debian-lts-announce] 20221204 [SECURITY] [DLA 3221-1] node-cached-path-relative security update lists.debian.org
Timeline
- Published
- Last modified