Weaknesses of type CWE-1321

439 results

Poluição de Protótipo

É a capacidade de um atacante modificar o protótipo de objetos JavaScript (ou estruturas similares em outras linguagens), afetando todas as instâncias daquela classe. Isso ocorre quando o código não valida ou sanitiza chaves de entrada antes de atribuir propriedades a objetos, permitindo acesso a `__proto__`, `constructor.prototype` ou `prototype`. O risco é grave: dados sensíveis podem ser injetados globalmente, lógica de autenticação contornada, ou até código executado.

Example

Um servidor Node.js recebe um objeto JSON `{"name": "João", "__proto__": {"isAdmin": true}}` e o mescla ingenuamente em um objeto de usuário via `Object.assign(usuario, entrada)`. De repente, todos os novos objetos criados herdam `isAdmin: true`, elevando privilégios sem qualquer validação real.

How to mitigate

Nunca confie em chaves de entrada: valide e bloqueie explicitamente chaves perigosas como `__proto__`, `constructor`, `prototype` antes de atribuir. Use `Object.create(null)` para criar objetos sem protótipo herdado, ou bibliotecas seguras como `lodash.merge` com configurações defensivas. Em APIs REST, considere esquemas estritos (JSON Schema) que rejeitam propriedades inesperadas.

CVE-2025-70956HIGHA State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04. The issue exists in the RUNVM instruction lEPSS 0.5%CVE-2026-78180MEDIUMalibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollutionEPSS 0.5%CVE-2025-57347CRITICALA vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, whichEPSS 0.5%CVE-2026-44791CRITICALn8n: XML Node Prototype Pollution Patch BypassEPSS 0.5%CVE-2026-32886HIGHParse Server's Cloud function dispatch crashes server via prototype chain traversalEPSS 0.5%CVE-2026-15538MEDIUMprimefaces primereact API ObjectUtils.js ObjectUtils.mutateFieldData prototype pollutionEPSS 0.5%CVE-2026-55886MEDIUMJodit Editor: Prototype Pollution in Jodit via Jodit.modules.Helpers.set()EPSS 0.5%CVE-2026-44789CRITICALn8n: HTTP Request Node Pagination Prototype Pollution to RCEEPSS 0.5%CVE-2025-61140CRITICALThe value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.EPSS 0.5%CVE-2026-107588HIGHMultiple Vulnerabilities in the Highcharts Library Bundled with Vaadin ChartsEPSS 0.5%CVE-2024-38994HIGHamoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to eEPSS 0.5%CVE-2026-15195MEDIUMapidevtools json-schema-ref-parser pointer.ts Pointer.set prototype pollutionEPSS 0.5%CVE-2026-114604HIGHGraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segmentsEPSS 0.5%CVE-2024-39853MEDIUMadolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers tEPSS 0.5%CVE-2025-3193HIGHVersions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() functionEPSS 0.5%CVE-2026-72769MEDIUMn8n before 1.123.67 Prototype Pollution via VM Expression EngineEPSS 0.5%CVE-2024-38987MEDIUMaofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to EPSS 0.5%CVE-2024-45815MEDIUMPrototype pollution in @backstage/plugin-catalog-backendEPSS 0.5%CVE-2026-102992CRITICALpiscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / envEPSS 0.5%CVE-2026-114142HIGHtoml-node: Prototype pollution: parsing a TOML document can write to Object.prototypeEPSS 0.5%