GitHub Advisoryadvisory · npm
GHSA-84p7-fh9c-6g8h Prototype Pollution in mixme
HIGH
Official page ↗
- Ecosystem
- npm
- Packages
- mixme
- Severity
- High
- Weaknesses
- CWE-1321
- Reviewed
- 2021-09-16
Affected packages
• npm mixme: < 0.5.2 → fixed in 0.5.2
Description
Impact
When copying properties from a source object to a target object, the target object can gain access to certain properties of the source object and modify their content.
Patches
The problem was patch with a more agressive discovery of secured properties to filter out.
Related
Weakness · CWE (1)
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness
References
- https://github.com/adaltas/node-mixme/security/advisories/GHSA-84p7-fh9c-6g8h web
- https://github.com/adaltas/node-mixme/issues/1 web
- https://github.com/adaltas/node-mixme/issues/2 web
- https://github.com/adaltas/node-mixme/commit/db70fe9bcbba451e9f8bd794a9fa7cdfa00125ad web
- https://github.com/adaltas/node-mixme package
- https://github.com/advisories/GHSA-79jw-6wg7-r9g4 advisory