AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-23771

MEDIUM · CVSS 6.5 EPSS 1.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-23771
Severity
MEDIUM
CVSS
6.5
EPSS
1.00%

Original NVD Description

This affects all versions of package notevil; all versions of package argencoders-notevil. It is vulnerable to Sandbox Escape leading to Prototype pollution. The package fails to restrict access to the main context, allowing an attacker to add or modify an object's prototype. **Note:** This vulnerability derives from an incomplete fix in [SNYK-JS-NOTEVIL-608878](https://security.snyk.io/vuln/SNYK-JS-NOTEVIL-608878).