Skip to content
Threat Feed
Subscribe

Product

Isomorphic-Git (< 1.42.0)

1 brief RSS
high advisory

Prototype Pollution in isomorphic-git getRemoteInfo

A prototype pollution vulnerability in isomorphic-git before 1.42.0 allows malicious Git server operators to manipulate proxy configurations and intercept credentials via crafted ref advertisements.

isomorphic-git vulnerability prototype-pollution supply-chain
1c