Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ramdajs Subscribe
Filtered by product Ramda
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42581 1 Ramdajs 1 Ramda 2023-02-09 6.4 MEDIUM 9.1 CRITICAL
** DISPUTED ** Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypes.