~ / search / GHSA-6pq3-928q-x6w6

GHSA-6pq3-928q-x6w6

Prototype Pollution

Source: GitHub Advisory Database (reviewed) High CVE-2020-8147

Packages

EcosystemPackageAffectedFixed in
npm utils-extend >= 0.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of `utils-extend` are vulnerable to prototype pollution. The `extend` function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. ## Recommendation No fix is currently available. Consider using an alternative package until a fix is made available.

References

External links from the advisory. They lead to third-party sites.