Description
A vulnerability was found in querystringify before 2.0.0. It’s possible to override built-in properties of the resulting query string object if a malicious string is inserted in the query string.
Recommendation
Update the querystringify package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.0.0
- Patched version(s): 2.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Prototype Pollution in querystringify and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prototype pollution in emit function - Vulnerability
- Prototype Pollution in json-logic-js - Vulnerability
- Prototype Pollution in lodash.defaultsdeep - lodash.defaultsdeep - Vulnerability
- Conform contains a Prototype Pollution Vulnerability in `parseWith...` function - @conform-to/zod - CVE-2024-32866
You might also like:
See something that needs correcting? Let us knowUpdated November 29, 2023