high7.3
CVE-2021-23395
Prototype Pollution in nedb
Impact
This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | nedb | <= 1.8.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nedb Project | Nedb | All versions |