CVE-2019-10798

Name of the Vulnerable Software and Affected Versions rdf-graph-array versions 0.3.0-rc6 and earlier

Description The issue concerns the manipulation of JavaScript objects, resulting in Prototype Pollution. Specifically, the rdf.Graph.prototype.add method can be tricked into adding or modifying properties of Object.prototype.

Recommendations For versions 0.3.0-rc6 and earlier, consider restricting the use of the rdf.Graph.prototype.add method until a patch is available. As a temporary workaround, avoid using this method to add or modify properties that could lead to Prototype Pollution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.