Skip to content
OpenAdvisories
Unscored CVE-2021-42581 EUVD-2021-29546GHSA-x9wq-pxpv-8p4v

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of appli…

Published May 10, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypes

Advisories 1

References