Skip to content
OpenAdvisories

Package · npm

express-param

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    flitto express-param fetchParams.js parameter pollution

    A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file lib/fetchParams.js. The manipulation leads to improper handling of extra parameters. It is possible to initiate the attac…