Critical severity9.8NVD Advisory· Published Jun 17, 2024· Updated Apr 15, 2026

CVE-2024-36573

Description

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@almela/obxnpm	< 0.0.4	0.0.4

Affected products

ghsa-coords
pkg:npm/%40almela/obx
Range: < 0.0.4

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-jj58-488v-4rgfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-36573ghsaADVISORY
gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1nvdWEB
github.com/llGaetanll/obx/commit/984ad92dc06774da4e6bdae0f5f5e59ae80ece8fghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000