CVE-2021-23395.md

CVE-2021-23395

Description

This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a proto or constructor.prototype payload.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-NEDB-1305279

Github

No PoCs found on GitHub currently.