Badger Database Prototype Pollution

Description

A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 1.2.1

References

• GHSA-69r2-2fg7-7hf9
• CVE-2024-36581
• CWE-1321
• CWE-94
• CAPEC-310
• OWASP 2021-A3
• OWASP 2021-A6

Related Issues

• Conform contains a Prototype Pollution Vulnerability in `parseWith...` function - CVE-2024-32866
• Blackprint @blackprint/engine Prototype Pollution issue - CVE-2024-24294
• Prototype pollution in ag-grid-community via the _.mergeDeep function - ag-grid-enterprise - CVE-2024-38996
• akbr patch-into was discovered to contain a prototype pollution via the function patchInto - CVE-2024-38991

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@abw/badger-database