GHSA-332q-7ff2-57h2MediumCVSS 6.3
Prototype Pollution in undefsafe
🔗 CVE IDs covered (1)
📋 Description
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
🎯 Affected products1
- npm/undefsafe:< 2.0.3