CVE-2022-21189
1 advisory.
npm/dexie CVE-2022-21189: high 7.3, EPSS 1.71%
Prototype Pollution in Dexie
Action: Upgrade dexie to 3.2.2 or later.
npm i dexie@3.2.2npm i dexie@4.0.0-alpha.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.2 | - |
| 4.0.0-alpha.1 | 4.0.0-alpha.3 | - |
Fixed versions
| 3.2.2 | 4.0.0-alpha.3 |
Sources
- osv: GHSA-3xgx-r9j4-qw9w
- https://nvd.nist.gov/vuln/detail/CVE-2022-21189
- https://github.com/dexie/Dexie.js/commit/1d655a69b9f28c3af6fae10cf5c61df387dc689b
- https://github.com/dexie/Dexie.js
- https://github.com/dexie/Dexie.js/blob/fe682ef24568278c3b31d9d6c93de095d4b77ae8/src/functions/utils.ts%23L134-L164
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2805308
- https://snyk.io/vuln/SNYK-JS-DEXIE-2607042
CVE-2022-21189 · published · modified · JSON