Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-3805

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-8v63-cqqc-6r2c

Prototype Pollution in object-path object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). The `del()` function fails to validate which Object properties it deletes. This allows attackers to modify the prototype of Object, causing the modification of default properties like `toString` on all objects.

gitlab/npm/object-path/CVE-2021-3805

Improperly Controlled Modification of Dynamically-Determined Object Attributes object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')