CVE-2024-36581

7.6 highEPSS 0.5%

High (7.6). EPSS 0.5% chance of exploitation in the next 30 days.

A Prototype Pollution issue in abw badger-database 1.2.1 allows an attacker to execute arbitrary code via dist/badger-database.esm.

Severity

7.6 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-06-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-69r2-2fg7-7hf9	npm	@abw/badger-database	<=1.2.1	no fix published