Skip to content

Commit a41a23f

Browse files
committed
JS: Raise precision of prototype-pollution query
1 parent 6d55d1f commit a41a23f

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

javascript/ql/src/Security/CWE-400/PrototypePollution.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,8 @@
33
* @description Recursively merging a user-controlled object into another object
44
* can allow an attacker to modify the built-in Object prototype.
55
* @kind path-problem
6-
* @problem.severity warning
7-
* @precision medium
6+
* @problem.severity error
7+
* @precision high
88
* @id js/prototype-pollution
99
* @tags security
1010
* external/cwe/cwe-250

0 commit comments

Comments
 (0)