GitHub Advisoryadvisory · npm

GHSA-3xph-cp8f-2229 Prototype Pollution in @fabiocaccamo/utils.js

HIGH Published 2021-12-10 Modified 2021-12-13 Official page ↗

Aliases: CVE-2021-3815
Ecosystem: npm
Packages: @fabiocaccamo/utils.js
Severity: High
CVSS vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
Weaknesses: CWE-1321
Reviewed: 2021-12-09

Affected packages

• npm @fabiocaccamo/utils.js: < 0.17.2 → fixed in 0.17.2

Description

utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution').

Related

Alias · CVE (1)

CVE-2021-3815 utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References