VYPR
← All advisories
Critical severity9.1NVD Advisory· Published May 10, 2022· Updated Jun 17, 2026

CVE-2021-42581

CVE-2021-42581

Description

Prototype poisoning in function mapObjIndexed in Ramda 0.27.0 and earlier allows attackers to compromise integrity or availability of application via supplying a crafted object (that contains an own property "__proto__") as an argument to the function. NOTE: the vendor disputes this because the observed behavior only means that a user can create objects that the user didn't know would contain custom prototypes

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Ramdajs/Ramda
    cpe:2.3:a:ramdajs:ramda:*:*:*:*:*:*:*:*
    Range: <=0.27.0
  • Ramda/Ramdadescription
  • Ramda/Ramdallm-fuzzy
    Range: <=0.27.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.