AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-25871

MEDIUM · CVSS 5.9 EPSS 1.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-06-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-25871
Severity
MEDIUM
CVSS
5.9
EPSS
1.10%

Original NVD Description

All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of [CVE-2020-7600](https://security.snyk.io/vuln/SNYK-JS-QUERYMEN-559867).