Feed/CVE-2021-26505
CVE-2021-26505CRITICALCVSS 9.8

CVE-2021-26505

Published Aug 11, 2023·Updated Jun 16, 2026

NVD Description

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.extend function.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free