~ / search / GHSA-3r8w-mphv-2f3f

GHSA-3r8w-mphv-2f3f

Prototype Pollution in lutils

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-23396

Packages

EcosystemPackageAffectedFixed in
npm lutils <= 2.4.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function.

References

External links from the advisory. They lead to third-party sites.