Количество 2
Количество 2
CVE-2021-23433
The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns.
GHSA-vpf5-82c8-9v36
Prototype Pollution in algoliasearch-helper
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-23433 The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns. | CVSS3: 5.9 | 0% Низкий | около 4 лет назад |
| GHSA-vpf5-82c8-9v36 Prototype Pollution in algoliasearch-helper | CVSS3: 9.8 | 0% Низкий | около 4 лет назад |
Уязвимостей на страницу