tschaub gh-pages vulnerable to prototype pollution · CVE-2022-37611 · GitHub Advisory Database · GitHub

tschaub gh-pages vulnerable to prototype pollution

Critical severity GitHub Reviewed Published Oct 12, 2022 to the GitHub Advisory Database • Updated Apr 22, 2024

Package

gh-pages (npm)

Affected versions

< 5.0.0

Patched versions

5.0.0

Description

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js.

References

Published by the National Vulnerability Database

Oct 12, 2022

Published to the GitHub Advisory Database Oct 12, 2022

Reviewed Apr 22, 2024

Last updated Apr 22, 2024

Severity

Critical

9.8

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H