GitHub Advisoryadvisory · npm

GHSA-fg52-5jjj-28h7 @cdr0/sg Prototype Pollution

MEDIUM Published 2024-06-17 Modified 2024-06-17 Official page ↗

Aliases: CVE-2024-36580
Ecosystem: npm
Packages: @cdr0/sg
Severity: Moderate
Weaknesses: CWE-1321
Reviewed: 2024-06-17

Affected packages

• npm @cdr0/sg: <= 1.0.10 (no fix yet)

Description

A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code.

Related

Alias · CVE (1)

CVE-2024-36580 A Prototype Pollution issue in cdr0 sg 1.0.10 allows an attacker to execute arbitrary code. vulnerability

Weakness · CWE (1)

CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References