GitHub Advisoryadvisory · npm

GHSA-jj58-488v-4rgf obx Prototype Pollution

CRITICAL Published 2024-06-17 Modified 2024-08-02 Official page ↗
Aliases
CVE-2024-36573
Ecosystem
npm
Packages
@almela/obx
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1321
Reviewed
2024-06-17

Affected packages

• npm @almela/obx: < 0.0.4 → fixed in 0.0.4

Description

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

Related

Alias · CVE (1)

  • CVE-2024-36573 almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References