GitHub Advisoryadvisory · npm

GHSA-7px2-3c2p-q4v4 flatnest Prototype Pollution vulnerability

HIGH Published 2023-06-30 Modified 2023-06-30 Official page ↗
Aliases
CVE-2023-26135
Ecosystem
npm
Packages
flatnest
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-1321
Reviewed
2023-06-30

Affected packages

• npm flatnest: <= 1.0.0 (no fix yet)

Description

All versions of the package flatnest are vulnerable to Prototype Pollution via the `nest()` function in `flatnest/nest.js` file.

Related

Alias · CVE (1)

  • CVE-2023-26135 All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file. vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References