CVE-2019-10795
Prototype Pollution in undefsafe
Summary
Prototype Pollution in undefsafe
Original description
The description as published by the source.
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
npm
undefsafe
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.3"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web snyk.io