Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-23395
7.3
HIGHCVSS v3
Severity scale
010
Description
This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.
NPM
louischatriot/nedb
GitHubThe JavaScript Database, for Node.js, nw.js, electron and the browser
GitHubThe JavaScript Database, for Node.js, nw.js, electron and the browserall versions, <= 1.8.0NVD
sailshq/nedb
GitHub