Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Prototype Pollution
Vulnerability Description
This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Vulnerability Type
N/A
Vulnerability Title
grunt-util-property 安全漏洞
Vulnerability Description
grunt-util-property是mikaelkaron个人开发者的一个软件包。 grunt-util-property 存在安全漏洞,该漏洞源于容易受到原型污染,函数call可能会被诱骗使用__proto__有效负载添加或修改 Object.prototype 的属性。
CVSS Information
N/A
Vulnerability Type
N/A