Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m929-rg27-gj99

Опубликовано: 24 сент. 2025
Источник: github
Github: Прошло ревью
CVSS4: 2.9

Описание

Duplicate Advisory: rollbar vulnerable to prototype pollution

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-r8c2-2qwq-94p6. This link is maintained to preserve external references.

Original Description

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

Пакеты

Наименование

rollbar

npm
Затронутые версииВерсия исправления

<= 2.26.4

Отсутствует

2.9 Low

CVSS4

Дефекты

CWE-1321

2.9 Low

CVSS4

Дефекты

CWE-1321