CVE-2021-23558
Prototype Pollution in bmoor
概要
Prototype Pollution in bmoor
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The package bmoor before 0.10.1 is vulnerable to Prototype Pollution due to missing sanitization in set function. Note: This vulnerability derives from an incomplete fix in CVE-2020-7736
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
npm
bmoor
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.10.1"}]}]
参照URL
- advisory nvd.nist.gov
- web github.com
- web github.com
- web security.snyk.io
- web snyk.io
- web snyk.io