CVE-2019-10808 Vulnerability in npm package utilitify

Description

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

Remediation

References

https://snyk.io/vuln/SNYK-JS-UTILITIFY-559497

https://github.com/xcritical-software/utilitify/commit/88d6e27009823338bf319ffb768fe6b08e8ad2d1%2C

Related Vulnerabilities

CVE-2019-16728 Vulnerability in maven package org.webjars.npm:dompurify

CVE-2022-34298 Vulnerability in maven package org.openidentityplatform.openam:openam-auth-nt

CVE-2018-19586 Vulnerability in maven package org.silverpeas.core:silverpeas-core-web

CVE-2022-36916 Vulnerability in maven package org.jenkins-ci.plugins:google-cloud-backup

CVE-2019-18954 Vulnerability in npm package pomelo

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H