GHSA-9534-h433-2rjfHighCVSS 8.8
Improperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify
🔗 CVE IDs covered (1)
📋 Description
utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.
🎯 Affected products1
- npm/utilitify:< 1.0.3