GHSA-4hq8-jgr8-mw9j
grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | grunt-util-property | <= 0.0.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of `Object.prototype` using a `__proto__` payload.
References
External links from the advisory. They lead to third-party sites.