Bodymen Project Bodymen vulnerabilities
2 known vulnerabilities affecting bodymen_project/bodymen.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2022-25296HIGHCVSS 7.3≤ 1.1.12022-03-17
CVE-2022-25296 [HIGH] CVE-2022-25296: The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which
The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. **Note:** This vulnerability derives from an incomplete fix to [CVE-2019-10792](https://security.snyk.io/vuln/SNYK-JS-BODYMEN-548897)
cvelistv5ghsanvdosv
CVE-2019-10792MEDIUMCVSS 6.3fixed in 1.1.1≥ 0.0.0, < unspecified2020-02-18
CVE-2019-10792 [MEDIUM] CWE-74 CVE-2019-10792: bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked int
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
ghsanvdosv