https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 04:27:09 +0000 https://vulnerability.circl.lu/vuln/ghsa-v8w9-8mx6-g223 <p><strong>Affected:</strong> npm: hono</p> <p>## Summary</p> <p>When using `parseBody({ dot: true })` in HonoRequest, specially crafted form field names such as `__proto__.x` could create objects containing a `__proto__` property.</p> <p>If the parsed result is later merged into regular JavaScript objects using unsafe merge patterns, this may lead to prototype pollution in the target object.</p> <p>## Details</p> <p>The `parseBody({ dot: true })` feature supports dot notation to construct nested objects from form field names.</p> <p>In previous versions, the `__proto__` path segment was not filtered. As a result, specially crafted keys such as `__proto__.x` could produce objects containing `__proto__` properties.</p> <p>While this behavior does not directly modify `Object.prototype` within Hono itself, it may become exploitable if the parsed result is later merged into regular JavaScript objects using unsafe merge patterns.</p> <p>## Impact</p> <p>Applications that merge parsed form data into regular objects using unsafe patterns (for example recursive deep merge utilities) may become vulnerable to prototype pollution.</p> <p><strong>Affected:</strong> npm: hono</p> <p>## Summary</p> <p>When using `parseBody({ dot: true })` in HonoRequest, specially crafted form field names such as `__proto__.x` could create objects containing a `__proto__` property.</p> <p>If the parsed result is later merged into regular JavaScript objects using unsafe merge patterns, this may lead to prototype pollution in the target object.</p> <p>## Details</p> <p>The `parseBody({ dot: true })` feature supports dot notation to construct nested objects from form field names.</p> <p>In previous versions, the `__proto__` path segment was not filtered. As a result, specially crafted keys such as `__proto__.x` could produce objects containing `__proto__` properties.</p> <p>While this behavior does not directly modify `Object.prototype` within Hono itself, it may become exploitable if the parsed result is later merged into regular JavaScript objects using unsafe merge patterns.</p> <p>## Impact</p> <p>Applications that merge parsed form data into regular objects using unsafe patterns (for example recursive deep merge utilities) may become vulnerable to prototype pollution.</p> https://vulnerability.circl.lu/vuln/ghsa-v8w9-8mx6-g223