Vulnerability CVE-2024-36573


Published: 2024-06-17

Description:
almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

 References:
https://gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1

Copyright 2026, cxsecurity.com

 

Back to Top