Project

General

Profile

Actions
Copy link

SecOps #1306

open
CD

[Sécurité] Vulnérabilité de code : landing/src/presentation/hooks/useTranslation.ts:44 (javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop)

SecOps #1306: [Sécurité] Vulnérabilité de code : landing/src/presentation/hooks/useTranslation.ts:44 (javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop)

Added by Client Dashboard about 1 month ago. Updated 7 days ago.

Status:
Submitted
Priority:
Normal
Assignee:
-
Start date:
07/03/2026
Due date:
% Done:

0%

Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
preprod_url:
deployed_at:
branch:
pr_url:
security_key:
landing/src/presentation/hooks/useTranslation.ts:44_javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop
severity:
medium
paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : landing/src/presentation/hooks/useTranslation.ts:44
**Règle** : javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop.prototype-pollution-loop

Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf). Possible mitigations might be: freezing the object prototype, using an object without prototypes (via Object.create(null) ), blocking modifications of attributes that resolve to object prototype, using Map instead of object.

### Extrait de code
```
requires login
```

### Lien CVE
https://github.com/HoLyVieR/prototype-pollution-nsec18/blob/master/paper/JavaScript_prototype_pollution_attack_in_NodeJS.pdf

Actions
Copy link

Also available in: PDF Atom