mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-09 02:45:46 +02:00
688 B
688 B
CVE-2021-23419
Description
This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a proto or constructor payload.
POC
Reference
Github
No PoCs found on GitHub currently.