CVE-2023-26135CWE-1321

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file

High · published June 30, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P
CVSS v4.0
Not supplied
EPSS
0.00892 · 59.1th percentile
Weakness
CWE-1321 · Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Published
2023-06-30T05:00Z
EPSS history
Timeline
  • 30 JUN 05:00Z
    All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file
    cvelistv5