GitHub Advisoryadvisory · npm

GHSA-qj86-v6m7-4qv2 Object Resolver Prototype Pollution

HIGH Published 2024-06-17 Modified 2024-07-05 Official page ↗

Aliases: CVE-2024-36577
Ecosystem: npm
Packages: @apphp/object-resolver
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H
Weaknesses: CWE-1321
Reviewed: 2024-06-17

Affected packages

• npm @apphp/object-resolver: < 3.1.1 → fixed in 3.1.1

Description

apphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty.

Related

Alias · CVE (1)

CVE-2024-36577 apphp js-object-resolver < 3.1.1 is vulnerable to Prototype Pollution via Module.setNestedProperty. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References