GHSA-2f6g-w5gj-c93hMediumCVSS 5.6

Prototype Pollution in iniparserjs

Published
April 13, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-23328 →

📋 Description

This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

🎯 Affected products1

  • npm/iniparserjs:<= 1.0.4

🔗 References (4)