Description
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype.
Remediation
References
https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-deparam.md
Related Vulnerabilities
CVE-2020-8298 Vulnerability in npm package fs-path
CVE-2021-4305 Vulnerability in npm package robots-txt-guard
CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http_2.12
CVE-2023-36479 Vulnerability in maven package org.eclipse.jetty:jetty-servlets
CVE-2022-29078 Vulnerability in maven package org.webjars.npm:ejs