Skip to content
OpenAdvisories

Vendor

spencermountain

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3

    spencermountain compromise Public Root API extend.js nlp.extend prototype pollution

    A vulnerability was identified in spencermountain compromise up to 14.15.1. Affected is the function nlp.extend of the file src/API/extend.js of the component Public Root API. The manipulation of the argument plugin leads to improperly controlled modification…