What is GHSA-vhxc-fhm5-qcp9?

GHSA-vhxc-fhm5-qcp9 is a security advisory published by GitHub Security Advisories with Medium severity. Prototype Pollution in bodymen

Which CVE IDs does GHSA-vhxc-fhm5-qcp9 cover?

GHSA-vhxc-fhm5-qcp9 covers the following CVE IDs: CVE-2022-25296. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vhxc-fhm5-qcp9?

GHSA-vhxc-fhm5-qcp9 has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

Which products are affected by GHSA-vhxc-fhm5-qcp9?

GHSA-vhxc-fhm5-qcp9 affects 1 product, including: npm/bodymen:\u003e= 0.0.0.

GHSA-vhxc-fhm5-qcp9MediumCVSS 6.3

Prototype Pollution in bodymen

Vendor

GitHub Security Advisories

Published

March 18, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-25296 →

📋 Description

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a proto payload. Note: This vulnerability derives from an incomplete fix to CVE-2019-10792

🎯 Affected products1

npm/bodymen:>= 0.0.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-25296
https://snyk.io/vuln/SNYK-JS-BODYMEN-2342623
https://github.com/advisories/GHSA-vhxc-fhm5-qcp9