CVE-2020-35149

Name of the Vulnerable Software and Affected Versions mquery versions prior to 3.2.3

Description The issue allows a pollution attack because a special property, such as proto, can be copied during a merge or clone operation. This occurs in the lib/utils.js file.

Recommendations For versions prior to 3.2.3, update to version 3.2.3 or later to resolve the issue. As a temporary workaround, consider restricting the merge or clone operations in the lib/utils.js file to prevent the pollution attack.