GitHub Advisoryadvisory · npm

GHSA-fpm5-vv97-jfwg Uncontrolled Resource Consumption in firebase

MEDIUM Published 2021-05-18 Modified 2021-04-15 Official page ↗
Aliases
CVE-2020-7765
Ecosystem
npm
Packages
@firebase/util
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-400
Reviewed
2021-04-15

Affected packages

• npm @firebase/util: < 0.3.4 → fixed in 0.3.4

Description

This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.

Related

Alias · CVE (1)

  • CVE-2020-7765 This affects the package @firebase/util before 0.3.4. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References