What is GHSA-3xph-cp8f-2229?

GHSA-3xph-cp8f-2229 is a security advisory published by GitHub Security Advisories with High severity. Prototype Pollution in @fabiocaccamo/utils.js

Which CVE IDs does GHSA-3xph-cp8f-2229 cover?

GHSA-3xph-cp8f-2229 covers the following CVE IDs: CVE-2021-3815. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3xph-cp8f-2229?

GHSA-3xph-cp8f-2229 has a CVSS v3 base score of 8.0, published by GitHub Security Advisories.

Which products are affected by GHSA-3xph-cp8f-2229?

GHSA-3xph-cp8f-2229 affects 1 product, including: npm/@fabiocaccamo/utils.js:\u003c 0.17.2.

GHSA-3xph-cp8f-2229HighCVSS 8.0

Prototype Pollution in @fabiocaccamo/utils.js

Vendor

GitHub Security Advisories

Published

December 10, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-3815 →

📋 Description

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

🎯 Affected products1

npm/@fabiocaccamo/utils.js:< 0.17.2

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-3815
https://github.com/fabiocaccamo/utils.js/commit/102efafb291ce1916985514440d3bf8a6826890a
https://huntr.dev/bounties/20f48c63-f078-4173-bcac-a9f34885f2c0
https://github.com/advisories/GHSA-3xph-cp8f-2229