CVE-2021-23558
Prototype Pollution in bmoor
Résumé
Prototype Pollution in bmoor
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The package bmoor before 0.10.1 is vulnerable to Prototype Pollution due to missing sanitization in set function. Note: This vulnerability derives from an incomplete fix in CVE-2020-7736
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
npm
bmoor
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.10.1"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com
- web security.snyk.io
- web snyk.io
- web snyk.io