| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @airvertco/frappejs | npm | = 0.0.11 |
The advisory explicitly names registerView as the vulnerable function. The PoC demonstrates prototype pollution by passing 'proto' as a property name to registerView, which modifies Object.prototype. This matches CWE-1321's pattern of improper prototype modification. While implementation details aren't available, the direct evidence from the advisory and working PoC provides high confidence in registerView's vulnerability.
KEV Misses 88% of Exploited CVEs- Get the report