Skip to content
OpenAdvisories

Package · Maven

com.graphhopper:graphhopper-web-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.4
    CVE-2021-23408

    Prototype Pollution

    This affects the package com.graphhopper:graphhopper-web-bundle before 3.2, from 4.0-pre1 and before 4.0. The URL parser could be tricked into adding or modifying properties of Object.prototype using a constructor or __proto__ payload.

    com.graphhopper:graphhopper-web-bundle Maven