Skip to content
OpenAdvisories

Package · npm

@hapi/pez

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-g9cg-h3jm-cwrc

    Prototype Pollution in @hapi/subtext

    Versions of `@hapi/pez` prior to 4.1.2 or 5.0.1 are vulnerable to Prototype Pollution. A multipart payload can be constructed in a way that one of the parts’ content can be set as the entire payload object’s prototype. If this prototype contains data, it may …

    @hapi/pez npm