GitHub Advisoryadvisory · npm

GHSA-7prf-vw4p-qr59 Prototype pollution in supermixer

HIGH Published 2021-12-10 Modified 2021-06-22 Official page ↗
Aliases
CVE-2020-24939
Ecosystem
npm
Packages
supermixer
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-1321
Reviewed
2021-06-17

Affected packages

• npm supermixer: < 1.0.5 → fixed in 1.0.5

Description

Prototype pollution in Stampit supermixer allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.

Related

Alias · CVE (1)

  • CVE-2020-24939 Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References