GitHub Advisoryadvisory · npm

GHSA-4m8h-h59m-m34j Prototype Pollution in bmoor

HIGH Published 2022-02-01 Modified 2022-02-07 Official page ↗
Aliases
CVE-2021-23558
Ecosystem
npm
Packages
bmoor
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-1321
Reviewed
2022-01-31

Affected packages

• npm bmoor: < 0.10.1 → fixed in 0.10.1

Description

The package bmoor before 0.10.1 is vulnerable to Prototype Pollution due to missing sanitization in set function. Note: This vulnerability derives from an incomplete fix in CVE-2020-7736

Related

Alias · CVE (1)

  • CVE-2021-23558 The package bmoor before 0.10.1 are vulnerable to Prototype Pollution due to missing sanitization in set function. vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References