CVE-2025-63704: CVE-2025-63704: prototip kirliliği

Açıklama (NVD)

NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object.

Özet bilgiler

CVSS v3.1

9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,48 (yüzdelik 41)

CWE

CWE-1321

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• gist.github.com
• github.com
• www.npmjs.com
• CWE-1321