CVSS 3.1
6.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LCVE-2019-10792
Medium (6.3) in bodymen project bodymen. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in bodymen 1.1.1.
bodymen before 1.1.1 is vulnerable to Prototype Pollution. The handler function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bodymen_project:bodymen
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8h84-8j4f-p97q | npm | bodymen | <1.1.1 | 1.1.1 |