Skip to content
OpenAdvisories

Package · npm

querymen

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2022-25871

    Prototype Pollution

    All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-760…

    querymen npm
  • Medium 5.3
    CVE-2020-7600

    Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen

    querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.

    querymen npm