| शीर्षक | Node.js style-dictionary 5.4.3 Prototype Pollution |
|---|
| विवरण | Prototype pollution in the public `style-dictionary/utils` entrypoint `convertTokenData()`.
When `convertTokenData(tokens, { output: "object" })` converts token arrays into nested objects, it splits `token.key` on `.` and writes each segment into the output object without rejecting dangerous path segments such as `__proto__`, `constructor`, or `prototype`.
As a result, an attacker-controlled token key like `__proto__.pp` can pollute `Object.prototype`.
This is reachable through the documented public API:
```js
mport { convertTokenData } from "style-dictionary/utils";
```
Impact: if untrusted token data is processed, an attacker may be able to trigger application-wide prototype pollution, leading to logic corruption, unsafe property resolution, denial of service, or downstream exploitation depending on how polluted properties are used. |
|---|
| स्रोत | ⚠️ https://github.com/style-dictionary/style-dictionary/issues/1699 |
|---|
| उपयोगकर्ता | Dremig (UID 95003) |
|---|
| सबमिशन | 08/06/2026 07:41 AM (2 महीनों पहले) |
|---|
| संयम | 09/07/2026 07:08 AM (1 month later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 373109 [style-dictionary तक 5.4.3 Expand API Local Privilege Escalation] |
|---|
| अंक | 0 |
|---|