CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@huntr.dev

Published

2021-09-06

Last modified

2024-08-03

Weaknesses

CWE-1321

Affected products

• Objection (Objection Project)
• Vincitobjection.js (Vincit)

References

• https://github.com/Vincit/objection.js/commit/46b842a6bc897198b83f41ac85c92864b991d7e9
• https://huntr.dev/bounties/c98e0f0e-ebf2-4072-be73-a1848ea031cc