SecOps #1305: [Sécurité] Vulnérabilité de code : landing/src/presentation/hooks/useTranslation.ts:27 (javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop) - MisterPinkP Landing - Redmine

Actions

SecOps #1305

open

[Sécurité] Vulnérabilité de code : landing/src/presentation/hooks/useTranslation.ts:27 (javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop)

SecOps #1305: [Sécurité] Vulnérabilité de code : landing/src/presentation/hooks/useTranslation.ts:27 (javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop)

Added by Client Dashboard about 1 month ago. Updated 7 days ago.

Status:

Submitted

Priority:

Normal

Assignee:

Start date:

07/03/2026

Due date:

% Done:

Estimated time:

spec_ref:

build_status:

build_number:

ci_run_url:

scan_status:

scan_report_url:

deploy_status:

preprod_url:

deployed_at:

branch:

pr_url:

security_key:

landing/src/presentation/hooks/useTranslation.ts:27_javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop

severity:

medium

paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : landing/src/presentation/hooks/useTranslation.ts:27
**Règle** : javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop

Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf). Possible mitigations might be: freezing the object prototype, using an object without prototypes (via Object.create(null) ), blocking modifications of attributes that resolve to object prototype, using Map instead of object.

### Extrait de code
```
requires login
```

### Lien CVE
https://github.com/HoLyVieR/prototype-pollution-nsec18/blob/master/paper/JavaScript_prototype_pollution_attack_in_NodeJS.pdf

CD Updated by Client Dashboard about 1 month ago Actions
Copy link
#1

Vulnérabilité `landing/src/presentation/hooks/useTranslation.ts:27_javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop` à nouveau détectée par un scan ; ticket déjà ouvert (aucun doublon créé).