Description

The package object-extend from 0.0.0 are vulnerable to Prototype Pollution via object-extend.

Remediation

References

https://snyk.io/vuln/SNYK-JS-OBJECTEXTEND-2401470

Related Vulnerabilities

CVE-2017-18640 Vulnerability in maven package org.yaml:snakeyaml

CVE-2022-24846 Vulnerability in maven package org.geowebcache:gwc-diskquota-jdbc

CVE-2020-8298 Vulnerability in npm package fs-path

CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-markdown-gfm

CVE-2022-25940 Vulnerability in npm package lite-server

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory