CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
540 vulnerabilities with CWE-1321
CVE-2020-7736
HIGH
bmoor < 0.8.12 - Prototype Pollution via set Function
CVSS 7.3
CVE-2020-8158
CRITICAL
TypeORM <0.2.25 - Prototype Pollution
CVSS 9.8
CVE-2020-7727
CRITICAL
gedi - Prototype Pollution via set Function
CVSS 9.8
CVE-2020-7726
CRITICAL
safe-object2 - Prototype Pollution via Setter Function
CVSS 9.8
CVE-2020-7725
CRITICAL
worksmith - Prototype Pollution via setValue Function
CVSS 9.8
CVE-2020-7724
CRITICAL
tiny-conf - Prototype Pollution via Set Function
CVSS 9.8
CVE-2020-7723
CRITICAL
promisehelpers - Prototype Pollution via Insert Function
CVSS 9.8
CVE-2020-7722
CRITICAL
nodee-utils < 1.2.3 - Prototype Pollution via deepSet Function
CVSS 9.8
CVE-2020-7721
CRITICAL
node-oojs - Prototype Pollution via setPath Function
CVSS 9.8
CVE-2020-7720
CRITICAL
node-forge < 0.10.0 - Prototype Pollution via util.setPath
CVSS 9.8
CVE-2020-7719
CRITICAL
locutus < 2.0.12 - Prototype Pollution via php.strings.parse_str
CVSS 9.8
CVE-2020-7718
CRITICAL
gammautils - Prototype Pollution via deepSet and deepMerge Functions
CVSS 9.8
CVE-2020-7717
CRITICAL
dot-notes - Prototype Pollution via create Function
CVSS 9.8
CVE-2020-7716
CRITICAL
deeps - Prototype Pollution via set Function
CVSS 9.8
CVE-2020-7715
CRITICAL
deep-get-set < 1.1.1 - Prototype Pollution via Main Function
CVSS 9.8
CVE-2020-7714
CRITICAL
confucious - Prototype Pollution via set Function
CVSS 9.8
CVE-2020-7713
CRITICAL
arr-flatten-unflatten - Prototype Pollution via Constructor
CVSS 9.8
CVE-2020-7708
CRITICAL
irrelon-path < 4.7.0 - Prototype Pollution via set, unSet, pushVal, and pullVal Functions
CVSS 9.8
CVE-2020-7707
CRITICAL
property-expr < 2.0.3 - Prototype Pollution via Setter Function
CVSS 9.8
CVE-2020-7706
CRITICAL
connie-lang < 0.1.1 - Prototype Pollution
CVSS 9.8
CVE-2020-7704
CRITICAL
linux-cmdline < 1.0.1 - Prototype Pollution via Constructor
CVSS 9.8
CVE-2020-7703
CRITICAL
nis-utils - Prototype Pollution via setValue Function
CVSS 9.8
CVE-2020-7702
CRITICAL
templ8 - Prototype Pollution via Parse Function
CVSS 9.8
CVE-2020-7701
CRITICAL
madlib-object-utils < 0.1.7 - Prototype Pollution via setValue
CVSS 9.8
CVE-2020-7700
CRITICAL
php.js - Prototype Pollution via parse_str
CVSS 9.8
Details
Vulnerabilities
540