Skip to content
OpenAdvisories
High · 8.8 CVE-2021-20083 EUVD-2022-4938GHSA-q9xg-h756-8689

jquery-plugin-query-object contains prototype pollution vulnerability

Published Apr 23, 2021 · Updated Aug 3, 2024 · Assigned by tenable

Description

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype.

Affected products

VendorProductAffectedFixed
— jquery-plugin-query-object 2.2.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm jquery-query-object <= 2.2.3 — GHSA-q9xg-h756-8689

References