GitHub Advisoryadvisory · npm

GHSA-hxcm-v35h-mg2x Prototype Pollution in querystringify

HIGH Published 2019-06-07 Modified 2023-11-29 Official page ↗
Ecosystem
npm
Packages
querystringify
Severity
High
Weaknesses
CWE-1321
Reviewed
2019-06-07

Affected packages

• npm querystringify: < 2.0.0 → fixed in 2.0.0

Description

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string.

Related

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References