CVE-2022-21824

The console.table() function in Node.js had a vulnerability where specially crafted input could modify the object prototype through prototype pollution, though only in a limited way by assigning empty strings to numerical keys. This could potentially affect how objects behave across an application.

CVE-2022-21824 exploits unsafe handling of user-controlled input in the 'properties' parameter of console.table() when combined with an object containing a '__proto__' property as the first parameter, enabling prototype pollution with restricted capability (empty string assignment to numeric prototype keys). Node.js versions >= 12.22.9, >= 14.18.3, >= 16.13.2, and >= 17.3.1 mitigate this by using null prototypes for affected property assignments.