GHSA-332q-7ff2-57h2MediumCVSS 6.3

Prototype Pollution in undefsafe

Published
February 9, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

📋 Description

undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.

🎯 Affected products1

  • npm/undefsafe:< 2.0.3

🔗 References (4)