Description

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

Remediation

References

https://snyk.io/vuln/SNYK-JS-OBJECTEXTEND-2401470

Related Vulnerabilities

CVE-2023-38286 Vulnerability in maven package de.codecentric:spring-boot-admin-server

CVE-2023-40185 Vulnerability in npm package shescape

CVE-2023-23848 Vulnerability in maven package org.jenkins-ci.plugins:synopsys-coverity

CVE-2022-24891 Vulnerability in maven package org.owasp.esapi:esapi

CVE-2020-26256 Vulnerability in npm package @fast-csv/parse

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory