GitHub Advisoryadvisory · npm

GHSA-pfv6-prqm-85q8 Prototype Pollution in madlib-object-utils

HIGH Published 2022-04-16 Modified 2022-04-22 Official page ↗
Aliases
CVE-2022-24279
Ecosystem
npm
Packages
madlib-object-utils
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-1321
Reviewed
2022-04-22

Affected packages

• npm madlib-object-utils: < 0.1.8 → fixed in 0.1.8

Description

The package madlib-object-utils before version 0.1.8 is vulnerable to Prototype Pollution via the `setValue` method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix of CVE-2020-7701

Related

Alias · CVE (1)

  • CVE-2022-24279 The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to… vulnerability

Weakness · CWE (1)

  • CWE-1321 Improperly Controlled Modification of Object Prototype Attributes weakness

References