CVE-2021-4245

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-4245
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-4245.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-4245
Aliases
Published
2022-12-15T20:15:09Z
Modified
2025-10-21T06:37:13.392521Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability classified as problematic has been found in chbrown rfc6902. This affects an unknown part of the file pointer.ts. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The exploit has been disclosed to the public and may be used. The name of the patch is c006ce9faa43d31edb34924f1df7b79c137096cf. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215883.

References

Affected packages

Git / github.com/chbrown/rfc6902

Affected ranges

Type
GIT
Repo
https://github.com/chbrown/rfc6902
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v0.*

v0.0.2
v0.0.3
v0.0.4
v0.0.5
v0.0.6

v1.*

v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.2.0
v1.2.1
v1.2.2
v1.3.0

v2.*

v2.0.0
v2.0.1
v2.1.0
v2.2.0
v2.2.1
v2.2.2
v2.2.3
v2.3.0
v2.4.0

v3.*

v3.0.0
v3.0.1
v3.0.2
v3.0.3
v3.0.4
v3.1.0
v3.1.1

v4.*

v4.0.0
v4.0.1
v4.0.2