~ / search / GHSA-5p42-m6f3-hpmj

GHSA-5p42-m6f3-hpmj

tree-kit Prototype Pollution vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-38894

Packages

EcosystemPackageAffectedFixed in
npm tree-kit < 0.7.5 0.7.5

Details

As written in the advisory (Markdown source, shown as plain text).

A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function.

References

External links from the advisory. They lead to third-party sites.