medium5.9
CVE-2022-25871
Prototype Pollution in querymen
Impact
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-7600](https://security.snyk.io/vuln/SNYK-JS-QUERYMEN-559867).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | querymen | <= 2.1.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Querymen Project | Querymen | All versions |