Cx14b19a02-387a @ Npm-body-parser-1.20.3

[cyber-sast]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about Cx14b19a02-387a
Applications: Visão Geral
Checkmarx Project: takenet/blip-ds
Repository URL: https://github.com/takenet/blip-ds
Branch: master
Scan ID: 6f0d76c7-ef9a-4ef2-94dc-ca624d6b1227

---

The package body-parser is vulnerable to prototype pollution, as it does no sanitation to the values received via the incoming JSON data. A remote attacker can inject a __proto__ object to the application, which would successfully be parsed on the server side. This affects the integrity of the application.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: LOW