TI-2021-12404 CVE-2021-32736 · GHSA-vr5m-3h59-7jcp
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in think-helper
Priority LOW 35
think-helper defines a set of helper functions for ThinkJS.
2 records
think-helper defines a set of helper functions for ThinkJS.
SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.