"-Synchronized-Data."

This commit is contained in:
CVE Team 2021-08-08 08:01:16 +00:00
parent fa1d7085c7
commit baa5960e8e
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743

View File

@ -48,12 +48,14 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747"
"refsource": "MISC",
"url": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747",
"name": "https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747"
},
{
"refsource": "CONFIRM",
"url": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348"
"refsource": "MISC",
"url": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348",
"name": "https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348"
}
]
},
@ -61,7 +63,7 @@
"description_data": [
{
"lang": "eng",
"value": "This affects the package open-graph before 0.2.6.\n The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.\r\n\r\n"
"value": "This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload."
}
]
},