litespeed-js/litespeed.js

litespeed-js/litespeed.js

GitHubGitHub
GitHubgithub.com
Releases29
Frequency2 months 3 weeks
Last Release
Stars45
Lite & fast micro javascript framework that is **easy to learn**.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-23682↗
7.3 HIGH7.5 HIGH

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a Prototype Pollution vulnerability.