7.5
Élevée
CVE-2022-22143 The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing…
Description
The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerability derives from an incomplete fix of another [vulnerability](https://security.snyk.io/vuln/SNYK-JS-CONVICT-1062508)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| convict 6.2 | premières → < 6.2.2 | 6.2.2 |