CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
501 vulnerabilities with CWE-1321
CVE-2020-28270
CRITICAL
object-hierarchy-access 0.2.0-0.32.0 - Prototype Pollution
CVSS 9.8
CVE-2020-28269
CRITICAL
field 0.0.1-1.0.1 - Prototype Pollution leading to Denial of Service and Remote Code Execution
CVSS 9.8
CVE-2020-7770
MEDIUM
json8 < 1.0.3 - Prototype Pollution
CVSS 6.5
CVE-2020-7768
HIGH
grpc < 1.24.4 and @grpc/grpc-js < 1.1.8 - Prototype Pollution via loadPackageDefinition
CVSS 7.5
CVE-2020-7766
HIGH
json-ptr < 2.0.0 - Prototype Pollution via Force Flag in Set Operation
CVSS 7.3
CVE-2020-7746
HIGH
chart.js < 2.9.4 - Prototype Pollution via Options Parameter
CVSS 7.5
CVE-2020-7751
MEDIUM
pathval < 1.1.1 - Prototype Pollution
CVSS 6.0
CVE-2020-7748
MEDIUM
Ts.ed < 5.65.7 - Prototype Pollution
CVSS 5.6
CVE-2020-7743
HIGH
mathjs < 7.5.1 - Prototype Pollution via deepExtend Function
CVSS 7.3
CVE-2020-7709
MEDIUM
json-pointer < 0.6.1 - Prototype Pollution via Slash Reference Handling
CVSS 6.0
CVE-2020-7737
HIGH
safetydance - Prototype Pollution via set Function
CVSS 7.3
CVE-2020-7736
HIGH
bmoor < 0.8.12 - Prototype Pollution via set Function
CVSS 7.3
CVE-2020-8158
CRITICAL
TypeORM <0.2.25 - Prototype Pollution
CVSS 9.8
CVE-2020-7727
CRITICAL
gedi - Prototype Pollution via set Function
CVSS 9.8
CVE-2020-7726
CRITICAL
safe-object2 - Prototype Pollution via Setter Function
CVSS 9.8
CVE-2020-7725
CRITICAL
worksmith - Prototype Pollution via setValue Function
CVSS 9.8
CVE-2020-7724
CRITICAL
tiny-conf - Prototype Pollution via Set Function
CVSS 9.8
CVE-2020-7723
CRITICAL
promisehelpers - Prototype Pollution via Insert Function
CVSS 9.8
CVE-2020-7722
CRITICAL
nodee-utils < 1.2.3 - Prototype Pollution via deepSet Function
CVSS 9.8
CVE-2020-7721
CRITICAL
node-oojs - Prototype Pollution via setPath Function
CVSS 9.8
CVE-2020-7720
CRITICAL
node-forge < 0.10.0 - Prototype Pollution via util.setPath
CVSS 9.8
CVE-2020-7719
CRITICAL
locutus < 2.0.12 - Prototype Pollution via php.strings.parse_str
CVSS 9.8
CVE-2020-7718
CRITICAL
gammautils - Prototype Pollution via deepSet and deepMerge Functions
CVSS 9.8
CVE-2020-7717
CRITICAL
dot-notes - Prototype Pollution via create Function
CVSS 9.8
CVE-2020-7716
CRITICAL
deeps - Prototype Pollution via set Function
CVSS 9.8
Details
Vulnerabilities
501