Querymen vulnerabilities
We track 1 vulnerability in Querymen products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Querymen vulnerabilities
- 7.5 High severity
querymen: Improperly Controlled Modification of Object Prototype Attributes
All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-7600