← Back

Querymen

querymen

Vendor: Querymen Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-25871
1Querymen Project
1Querymen
Jun 17, 2026
Jun 17, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives...Show more
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-7600](https://security.snyk.io/vuln/SNYK-JS-QUERYMEN-559867).Show less
CVE-2020-7600
1Querymen Project
1Querymen
Jun 17, 2026
Mar 12, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollut...Show more
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks.Show less