Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Bodymen Project Component: Bodymen Clear all filters
TI-2022-08990 CVE-2022-25296 · GHSA-vhxc-fhm5-qcp9

Prototype pollution in bodymen

Priority LOW 34

The package bodymen from 0.0.0 are vulnerable to Prototype Pollution via the handler function which could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00973 Published 2022-03-17 No fix listed CWE-1321
TI-2019-08057 CVE-2019-10792 · GHSA-8h84-8j4f-p97q

Injection in Snyk bodymen

Priority LOW 30

bodymen before 1.1.1 is vulnerable to Prototype Pollution.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0096 Published 2020-02-18 Fixed in 1.1.1 CWE-74