Skip to content
OpenAdvisories

Archive

24 December 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.1
    CVE-2022-46175 Public exploit

    Prototype Pollution in JSON5 via Parse Method

    JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `…