Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The package protobufjs before 6.11.3 are vulnerable to Prototype Pollution which can allow an attacker to add/modify properties of the Object.prototype. This vulnerability can occur in multiple ways: 1. by providing untrusted user input to util.setProperty or to ReflectionObject.setParsedOption functions 2. by parsing/loading .proto files
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 Nodejs protobufjs, Prototype Pollution, #CVE-2022-25878 (Medium) https://dailycve.com/nodejs-protobufjs-prototype-pollution-cve-2022-25878-medium/
Post summary
The message announces a Medium‑severity prototype pollution vulnerability in Node.js protobufjs (CVE‑2022‑25878) and links to a dailycve article for details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | protobufjs_project | protobufjs | - | node.js | - |