https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:45:44 +0000 https://vulnerability.circl.lu/vuln/cve-2022-21824 <p><strong>Affected:</strong> NodeJS Node</p> <p>Due to the formatting logic of the &#34;console.table()&#34; function it was not safe to allow user controlled input to be passed to the &#34;properties&#34; parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be &#34;__proto__&#34;. The prototype pollution has very limited control, in that it only allows an empty string to be assigned to numerical keys of the object prototype.Node.js &gt;= 12.22.9, &gt;= 14.18.3, &gt;= 16.13.2, and &gt;= 17.3.1 use a null protoype for the object these properties are being assigned to.</p> <p><strong>Affected:</strong> NodeJS Node</p> <p>Due to the formatting logic of the &#34;console.table()&#34; function it was not safe to allow user controlled input to be passed to the &#34;properties&#34; parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be &#34;__proto__&#34;. The prototype pollution has very limited control, in that it only allows an empty string to be assigned to numerical keys of the object prototype.Node.js &gt;= 12.22.9, &gt;= 14.18.3, &gt;= 16.13.2, and &gt;= 17.3.1 use a null protoype for the object these properties are being assigned to.</p> https://vulnerability.circl.lu/vuln/cve-2022-21824