← Back

Ramdajs

ramdajs

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Ramda
ramda
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-42581
1Ramdajs
1Ramda
Jun 17, 2026
May 10, 2022
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__")...Show more
Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypesShow less