Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-23433
5.9
MEDIUMCVSS v3
Severity scale
010
Description
The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns.
@types/algoliasearch-helper
NPMStub TypeScript definitions entry for algoliasearch-helper, which provides its own types definitions
NPMStub TypeScript definitions entry for algoliasearch-helper, which provides its own types definitions< 3.6.2NVD
GitHub