CVE-2021-3766

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1321

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-376605.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exceptionCVE-2021-376615.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in `boCVE-2021-376627.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate undefined behavior via CVE-2021-376637.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in `tf.raw_ops.QuanCVE-2021-376647.1TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of hCVE-2021-376657.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions due to incomplete validation in MKL implementatiCVE-2021-376667.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binCVE-2021-376677.8TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binCVE-2021-376685.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in appliCVE-2021-376695.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in appliCVE-2021-37675.4bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-376705.5TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of h
CVE-2021-3766: Critical severity, CVSS 9.8 | Vulnix