Skip to content
OpenAdvisories
High · 7.5 CVE-2021-3766 EUVD-2021-2106GHSA-r659-8xfp-j327

Prototype Pollution in vincit/objection.js

Published Sep 6, 2021 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: vincit Product: vincit/objection.js Package: objection Ecosystem: npm

Description

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Affected products

VendorProductAffectedFixed
vincit vincit/objection.js unspecified – < 2.2.16 2.2.16

Affected packages

EcosystemPackageAffectedFixedRecord
npm objection < 2.2.16 2.2.16 GHSA-r659-8xfp-j327

References