CVE-2021-25945 Vulnerability in npm package js-extend

Description

Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.

Remediation

References

https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25945

Related Vulnerabilities

CVE-2021-21344 Vulnerability in maven package com.thoughtworks.xstream:xstream

CVE-2020-7766 Vulnerability in maven package org.webjars.npm:json-ptr

CVE-2021-22963 Vulnerability in npm package fastify-static

CVE-2020-7709 Vulnerability in npm package json-pointer

CVE-2020-7690 Vulnerability in maven package org.webjars:jspdf

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H