Querymen Project Querymen
2 CVEs affecting Querymen Project Querymen. Latest disclosed: 2022-06-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25871 | Medium | 5.9 | 2022-06-17 | All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by user… |
CVE-2020-7600 | Medium | 5.3 | 2020-03-12 | querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users withou… |