GHSA-9534-h433-2rjfHighCVSS 8.8

Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify

Published
May 7, 2021
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

📋 Description

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

🎯 Affected products1

  • npm/utilitify:< 1.0.3

🔗 References (4)