CVE-2019-10795
Prototype Pollution in undefsafe
Résumé
Prototype Pollution in undefsafe
Description d'origine
La description telle que publiée par la source (souvent en anglais).
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
undefsafe
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.3"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web snyk.io