CWE-1321: Prototype Pollution
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
Also known as Improperly Controlled Modification of Object Prototype Attributes.
A kind of CWE-915 Mass Assignment.
From the CWE List. © The MITRE Corporation.
Newest
- mootools mootools-moremootools-more vulnerable to prototype pollution8.8 High
- jquery-sparkle project jquery-sparkleImproperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in...8.8 High
- nolimits4web swiperPrototype Pollution7.5 High
- gulpjs copy-propsPrototype Pollution7.3 High
- patchmerge project patchmergePrototype pollution vulnerability in 'patchmerge'9.8 Critical
- mcollina msgpack5Prototype poisoning6.7 Medium
- changeset project changesetChangeset vulnerable to prototype pollution9.8 Critical
- fireblink object-colliderPrototype Pollution Vulnerability in object-collider9.8 Critical
- node-redPrototype Pollution in Node-Red7.7 High
- mitreid connectAutobinding vulnerability in MITREid Connect9.1 Critical
- set-or-get project set-or-getPrototype Pollution in set-or-get9.8 Critical
- dynamoosePrototype Pollution in Dynamoose7.2 High
- decal project decalPrototype Pollution8.6 High
- decal project decalPrototype Pollution8.6 High
- dotty project dottyPrototype pollution in dotty9.8 Critical
- totaljs total.jsPrototype Pollution7.3 High
- getadigital nested-object-assignPrototype Pollution7.5 High
- iniparserjs project iniparserjsPrototype Pollution5.6 Medium
- amazon aws sdk for javascipt, aws shared configuration file loader +1 morePrototype Pollution7.3 High
- asciitable.js project asciitable.jsPrototype Pollution7.5 High
- flattenizer project flattenizerflattenizer vulnerable to prototype pollution9.8 Critical
- shvl project shvlshvl vulnerable to prototype pollution9.8 Critical
- getobject project getobjectPrototype pollution in getobject9.8 Critical
- set-object-value project set-object-valuePrototype pollution in set-object-value9.8 Critical
- deep-set project deep-setPrototype pollution vulnerability in 'deep-set'9.8 Critical
- dset project dsetdset vulnerable to prototype pollution9.8 Critical
- multi-ini project multi-iniPrototype Pollution5.6 Medium
- multi-ini project multi-iniPrototype Pollution5.6 Medium
- datatables datatables.netPrototype Pollution7.3 High
- js-dataPrototype Pollution7.5 High
- moutjs moutPrototype Pollution7.5 High
- ini project ini, debian linux +1 morePrototype Pollution7.3 High
- ahdinosaur set-inPrototype pollution in set-in9.8 Critical
- keyget project keygetkeyget vulnerable to prototype pollution9.8 Critical
- y18n project y18n, oracle graalvm, siemens sinec infrastructure network services +2 morePrototype Pollution7.3 High
- controlled-merge project controlled-mergePrototype pollution in controlled-merge7.5 High
- doc-path project doc-pathPrototype Pollution7.5 High
- sharpred deephasPrototype Pollution in deephas9.8 Critical
- mjpclab object-hierarchy-accessPrototype pollution in object-hierarchy-access9.8 Critical
- exodus fieldPrototype Pollution in field9.8 Critical
- json8 project json8Prototype Pollution6.5 Medium
- google grpcPrototype Pollution7.5 High
- set project setPrototype pollution in @strikeentco/set7.5 High
- json-ptr project json-ptrPrototype Pollution7.3 High
- json8-merge-patch project json8-merge-patchPrototype pollution in json8-merge-patch7.5 High
- chartjs chart.jsPrototype Pollution7.5 High
- chaijis pathvalPrototype Pollution6.0 Medium
- ts.ed project ts.edPrototype Pollution5.6 Medium
- josdejong mathjsPrototype Pollution7.3 High
- simpl-schema project simpl-schemaPrototype Pollution7.5 High
- Show moreLoading…