Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4Y20tdjM1aC1tZzJ4

Prototype Pollution in querystringify

A vulnerability was found in querystringify before 2.0.0. It's possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string.

Permalink: https://github.com/advisories/GHSA-hxcm-v35h-mg2x
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4Y20tdjM1aC1tZzJ4
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 5 years ago
Updated: 6 months ago

Identifiers: GHSA-hxcm-v35h-mg2x
References:

• https://github.com/unshiftio/querystringify/pull/19
• https://github.com/unshiftio/querystringify/commit/422eb4f6c7c28ee5f100dcc64177d3b68bb2b080
• https://github.com/advisories/GHSA-hxcm-v35h-mg2x

Repository: https://github.com/unshiftio/querystringify
Blast Radius: 0.0

Affected Packages