Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| backbone-query-parameters(npm) | 0 | N/A | N/A |
CVSS Metrics