Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xx4g-r65p-3qf2

Опубликовано: 24 сент. 2025
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

mpregular vulnerable to prototype pollution

mpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vulnerability in the mp.addEventHandler function of mpregular version 0.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

Пакеты

Наименование

mpregular

npm
Затронутые версииВерсия исправления

<= 0.2.0

Отсутствует

EPSS

Процентиль: 34%
0.00139
Низкий

7.5 High

CVSS3

Дефекты

CWE-1321

Связанные уязвимости

CVSS3: 7.5
nvd
4 месяца назад

mpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vulnerability in the mp.addEventHandler function of mpregular version 0.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

EPSS

Процентиль: 34%
0.00139
Низкий

7.5 High

CVSS3

Дефекты

CWE-1321