Brian Heilman

2 exploits Active since Oct 2020

CVE-2020-7736 WRITEUP HIGH WRITEUP

Bmoor < 0.8.12 - Prototype Pollution

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

CVSS 7.3

View Code

CVE-2021-23558 WRITEUP HIGH WRITEUP

Bmoor < 0.10.1 - Prototype Pollution

The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. **Note:** This vulnerability derives from an incomplete fix in [CVE-2020-7736](https://security.snyk.io/vuln/SNYK-JS-BMOOR-598664)

CVSS 7.3

View Code