CLEANSTART-2024-PC71333
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-PC71333.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2024-PC71333
- Upstream
- Published
- 2026-10-31T14:29:52Z
- Modified
- 2026-10-31T16:02:05Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled Jav...
- Details
-
CVE-2022-1529 affects multiple packages. An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled JavaScript executing in the privileged parent process. See references for individual vulnerability details.
- References