Description
AdonisJS is a TypeScript-first web framework. Prior to versions 10.1.3 and 11.0.0-next.9, a prototype pollution vulnerability in AdonisJS multipart form-data parsing may allow a remote attacker to manipulate object prototypes at runtime. This issue has been patched in versions 10.1.3 and 11.0.0-next.9.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| adonisjs | core | < 10.1.3, < 11.0.0-next.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @adonisjs/bodyparser | < 10.1.3 | 10.1.3 | GHSA-f5x2-vj4h-vg4c |
| npm | @adonisjs/bodyparser | >= 11.0.0-next.0, < 11.0.0-next.9 | 11.0.0-next.9 | GHSA-f5x2-vj4h-vg4c |