← Back

CVE-2021-23426

nvd nist
Published: Sep 1, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function.

Affected (1)

Products: Proto Project: Proto
Proto Project
1 product
Proto
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Proto
All versions

References (4)

Source: report@snyk.io
ExploitMitigationThird Party Advisory
Source: report@snyk.io
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory

Timeline

No history available yet.