The vulnerability description explicitly names util.setProperty and ReflectionObject.setParsedOption as entry points.
The GitHub commit shows a prototype pollution fix in util.js adding 'proto' checks to setProperty.
Snyk's PoC demonstrates exploitation through both functions.
While the exact ReflectionObject implementation isn't shown in diffs, the advisory explicitly lists it as vulnerable and the pattern matches known prototype pollution vectors in option parsing.
Vulnerable functions
Only Mi**o us*rs **n s** t*is s**tion
WAF Protection Rules
WAF Rule
T** p**k*** proto*u*js is vuln*r**l* to Prototyp* Pollution, w*i** **n *llow *n *tt**k*r to ***/mo*i*y prop*rti*s o* t** O*j**t.prototyp*. V*rsions **t*r *n* in*lu*in* *.**.* until *.**.* *n* **t*r *n* in*lu*in* *.**.* until *.**.* *r* vuln*r**l*.
T
JavaScript
Miggo AI
