CVE-2019-10790

CVE-2019-10790 is a high-severity vulnerability affecting all versions up to and including 2.7.3 of the taffydb npm module. This flaw allows attackers to forge internal database indices by injecting additional properties into user-supplied input. By manipulating these easily guessable indices, attackers can bypass query conditions and directly access any data items within the database. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity, requiring no user interaction, and leading to high confidentiality impact without affecting integrity or availability. There is currently no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.