What is GHSA-69r2-2fg7-7hf9?

GHSA-69r2-2fg7-7hf9 is a security advisory published by GitHub Security Advisories with High severity. Badger Database Prototype Pollution

Which CVE IDs does GHSA-69r2-2fg7-7hf9 cover?

GHSA-69r2-2fg7-7hf9 covers the following CVE IDs: CVE-2024-36581. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-69r2-2fg7-7hf9?

GHSA-69r2-2fg7-7hf9 has a CVSS v3 base score of 7.6, published by GitHub Security Advisories.

Which products are affected by GHSA-69r2-2fg7-7hf9?

GHSA-69r2-2fg7-7hf9 affects 1 product, including: npm/@abw/badger-database:\u003c= 1.2.1.

GHSA-69r2-2fg7-7hf9HighCVSS 7.6

Badger Database Prototype Pollution

Vendor

GitHub Security Advisories

Published

June 17, 2024

Last Modified

August 2, 2024

🔗 CVE IDs covered (1)

CVE-2024-36581 →

📋 Description

A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm.

🎯 Affected products1

npm/@abw/badger-database:<= 1.2.1

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-36581
https://gist.github.com/mestrtee/f6b2ed1b3b4bc0df994c7455fc6110bd
https://github.com/advisories/GHSA-69r2-2fg7-7hf9