Mozilla Convict
3 CVEs affecting Mozilla Convict. Latest disclosed: 2024-11-26. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0163 | High | 8.4 | 2024-11-26 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convict. This allows an attacker to inject… |
CVE-2022-21190 | High | 7.5 | 2022-05-13 | This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https://security.snyk.io/vuln/SNYK-JS-CONVICT-2340604). The [fix](https://g… |
CVE-2022-22143 | High | 7.5 | 2022-05-01 | The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerab… |