Intel

AIKIDO-2024-10464

node-opcua-address-space is vulnerable to Prototype Pollution

Prototype Pollution Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Nov 21, 2024

32

Low Risk

This Affects:

jsnode-opcua-address-space
0.0.1 - 2.136.0
Fixed in 2.137.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to several minor security issues, including potential prototype pollution, which could allow attackers to manipulate object properties and impact application behavior.

Who does this affect?

You are affected if you are using a version which is within vulnerability ranges

Background info

node-opcua-address-space is vulnerable to Prototype Pollution in versions 0.0.1 - 2.136.0.

How to fix this

Upgrade the node-opcua-address-space library to the patch version.