CVE-2021-23426.md

CVE-2021-23426

Description

This affects all versions of package Proto. It is possible to inject pollute the object property of an application using Proto by leveraging the merge function.

POC

Reference

• https://snyk.io/vuln/SNYK-JS-PROTO-1316301

Github

No PoCs found on GitHub currently.