CVE-2022-25871
Published Jun 17, 2022All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any saniti…
Vendor archive
2 CVEs tagged to vendor querymen_project — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any saniti…
querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization.…