What the vulnerability does

01Description

A prototype pollution attack in cached-path-relative versions <=1.0.1 allows an attacker to inject properties on Object.prototype which are then inherited by all the JS objects through the prototype chain causing a DoS attack.

Key dates

02Disclosure timeline

November 6, 2018 CVE published
August 5, 2024 Record updated