[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRpzc8_5Kzy9yzbiXNWPn8PuaeUvav_qeJoSBBjx4HuE":3,"g5a-ex:mozilla\u002Fconvict@*":198,"g5a-family:mozilla\u002Fconvict":200},{"success":4,"data":5},true,{"product":6,"versions":108,"topVulnerabilitiesByEpss":155,"kevVulnerabilities":175,"seoMetadata":176,"meta":195},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":107},"mozilla","convict",46,3,0,"2024-11-26",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.1.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.2",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.3",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.3",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.3",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.2",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.3",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.0",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.1",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.2",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"4.1.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"4.2.0",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"4.3.0",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"4.3.1",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"4.3.2",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"4.4.0",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"4.4.1",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"5.0.0",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"5.0.1",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"5.0.2",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"5.1.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.0",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"5.2.1",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"6.0.0",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"6.0.1",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"6.1.0",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.0",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.1",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"6.2.2","Convict by Mozilla is a technology product with 46 tracked versions and 3 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},[156,164,169],{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":161,"severity":162,"isKev":16,"epssScore":163},"CVE-2022-21190","This affects the package convict before 6.2.3. This is a bypass of [CVE-2022-22143](https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-JS-CONVICT-2340604). The [fix](https:\u002F\u002Fgithub.com\u002Fmozilla\u002Fnode-convict\u002Fcommit\u002F3b86be087d8f14681a9c889d45da7fe3ad9cd880) introduced, relies on the startsWith method and does not prevent the vulnerability: before splitting the path, it checks if it starts with __proto__ or this.constructor.prototype. To bypass this check it's possible to prepend the dangerous paths with any string value followed by a dot, like for example foo.__proto__ or foo.this.constructor.prototype.","2022-05-13",9.8,"v3.1","Critical",0.03974,{"cveId":165,"description":166,"publishedDate":167,"cvssScore":160,"cvssVersion":161,"severity":162,"isKev":16,"epssScore":168},"CVE-2022-22143","The package convict before 6.2.2 are vulnerable to Prototype Pollution via the convict function due to missing validation of parentKey. **Note:** This vulnerability derives from an incomplete fix of another [vulnerability](https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-JS-CONVICT-1062508)","2022-05-01",0.02179,{"cveId":170,"description":171,"publishedDate":12,"cvssScore":172,"cvssVersion":161,"severity":173,"isKev":16,"epssScore":174},"CVE-2023-0163","Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convict.\n\nThis allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a crash.\n\n\nThe main use case of Convict is for handling server-side \nconfigurations written by the admins owning the servers, and not random \nusers. So it's unlikely that an admin would deliberately sabotage their \nown server. Still, a situation can happen where an admin not \nknowledgeable about JavaScript could be tricked by an attacker into \nwriting the malicious JavaScript code into some config files.\n\n\n\nThis issue affects Convict: before 6.2.4.",8.4,"High",0.00274,[],{"title":177,"metaDescription":178,"keywords":179,"structuredData":180},"Convict by Mozilla - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Convict by Mozilla covering 46 versions with 3 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Convict vulnerabilities, Convict security, Convict CVE, Mozilla Convict, Convict threat intelligence, Mozilla security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":181,"@type":182,"name":183,"description":178,"url":184,"manufacturer":185,"applicationCategory":189,"softwareVersion":190,"mainEntity":191},"https:\u002F\u002Fschema.org","SoftwareApplication","Convict","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmozilla\u002Fconvict",{"@type":186,"name":187,"url":188},"Organization","Mozilla","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmozilla","Security Software","46 versions tracked",{"@type":192,"name":193,"description":194,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Convict Security Vulnerabilities","Security vulnerabilities affecting Convict by Mozilla",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":196,"apiVersion":197},"2026-10-18T16:40:42.661Z","3.0",{"rows":199,"total":11,"capped":16,"failed":11},[],[]]