Falhas do tipo CWE-1321

429 resultados

Poluição de Protótipo

Fraqueza que permite a um atacante modificar o protótipo de objetos JavaScript, afetando todas as instâncias presentes e futuras da aplicação. Ocorre quando código não valida ou filtra adequadamente dados que serão mesclados em objetos, permitindo injeção de propriedades maliciosas como '__proto__' ou 'constructor.prototype'.

Exemplo

Uma API REST que aceita JSON e faz merge direto em um objeto de configuração global (ex: `Object.assign(config, userInput)`) permite que um atacante envie {"__proto__.isAdmin": true} para ganhar privilégios em todos os usuários conectados.

Como mitigar

Valide e sanitize entradas antes de atribuições em objetos; use Object.create(null) para criar objetos sem protótipo; implemente blocklists explícitas para propriedades permitidas; considere bibliotecas especializadas em deep merge seguro (como lodash com opções de segurança).

CVE-2026-67319MEDIUMaxios before 0.33.0 Prototype Pollution via nested option objectsEPSS 0.3%CVE-2026-46509HIGHdeepobj: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')EPSS 0.3%CVE-2026-45302HIGHPrototype Pollution in parse-nested-form-data via `__proto__` in FormData field namesEPSS 0.3%CVE-2026-25521CRITICALLocutus is vulnerable to Prototype PollutionEPSS 0.3%CVE-2026-12209MEDIUMRubyLouvre avalon Template Filter index.js prototype pollutionEPSS 0.3%CVE-2026-12208MEDIUMjsonata-js jsonata Function Binding Frame System jsonata.js createFrame prototype pollutionEPSS 0.3%CVE-2026-40190MEDIUMLangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`EPSS 0.3%CVE-2025-57350HIGHThe csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototype pollution vulneraEPSS 0.3%CVE-2026-110848MEDIUMn8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection MergeEPSS 0.3%CVE-2026-110842HIGHn8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation InterpreterEPSS 0.3%CVE-2026-41690HIGHPrototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parametersEPSS 0.3%CVE-2026-97724MEDIUMA prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing EPSS 0.3%CVE-2024-14020LOWcarboneio carbone Formatter input.js prototype pollutionEPSS 0.3%CVE-2026-23736HIGHseroval Affected by Prototype Pollution via JSON DeserializationEPSS 0.3%CVE-2026-86536MEDIUMApache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScriptEPSS 0.3%CVE-2026-94646HIGHApache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)EPSS 0.3%CVE-2026-118678HIGHn8n before 2.41.4 and 2.42.1 Prototype Pollution DoS via Workflow History CompactionEPSS 0.3%CVE-2026-116674MEDIUMsysteminformation: Prototype pollution in `networkStats()` via the interface nameEPSS 0.3%CVE-2026-106550HIGHCVE-2026-106550EPSS 0.3%CVE-2026-46510HIGHPrototype pollution in form-data-objectizer via bracket-notation form keysEPSS 0.3%