Description
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Remediation
References
https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940
https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822
Related Vulnerabilities
CVE-2023-45135 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-war
CVE-2013-1814 Vulnerability in maven package org.apache.rave:rave-web
CVE-2019-10744 Vulnerability in npm package lodash
CVE-2018-3724 Vulnerability in npm package general-file-server
CVE-2023-40989 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-common