prototypejs/prototype

prototypejs/prototype

prototypejs.org

Releases12

Frequency7 months 2 weeks

Last Releasealmost 11 years ago

Stars3.53K

Prototype JavaScript framework

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2020-27511NVD↗	= 1.7.3	Jun 21, 2021Monday, 21 June 2021, 20:15	7.5 HIGH	5 MEDIUM
An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.
CVE-2020-7993NVD↗	= 1.6.0.1	Feb 3, 2020Monday, 3 February 2020, 15:15	4.3 MEDIUM	4 MEDIUM
Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.
CVE-2008-7220NVD↗	< 1.6.0.2	Sep 13, 2009Sunday, 13 September 2009, 22:30	—	7.5 HIGH
Unspecified vulnerability in Prototype JavaScript framework (prototypejs) before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors.