Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-25943 EUVD-2021-1051GHSA-cwcx-rxgc-cmw3

Prototype pollution in 101

Published May 14, 2021 · Updated Apr 30, 2025 · Assigned by Mend

Description

Prototype pollution vulnerability in '101' versions 1.0.0 through 1.6.3 allows an attacker to cause a denial of service and may lead to remote code execution.

Affected products

VendorProductAffectedFixed
— 101 1.0.0, 1.1.0, 1.1.1, 1.2.0, 1.3.0, 1.3.1, 1.4.0, 1.5.0, 1.6.0, 1.6.1, 1.6.2, 1.6.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm 101 >= 1.0.0, <= 1.6.3 — GHSA-cwcx-rxgc-cmw3

References