The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerability derives from an incomplete fix of another [vulnerability](https://security.snyk.io/vuln/SNYK-JS-CONVICT-1062508)
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2022-05-01T15:30:45.287380Z
Updated: 2024-09-17T02:02:16.928Z
Reserved: 2022-02-24T00:00:00
Link: CVE-2022-22143
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2022-05-01T16:15:08.307
Modified: 2022-05-11T17:45:09.980
Link: CVE-2022-22143
Redhat