CVE-2023-26139

Published: 2023-08-01T05:15Z

Last Modified: 2024-11-21T07:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of the setProperty() function. Exploiting this vulnerability is possible due to improper input sanitization which allows the usage of arguments like “__proto__”. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt