~ / search / GHSA-8f8g-9j73-7p82

GHSA-8f8g-9j73-7p82

steal vulnerable to Prototype Pollution via optionName variable

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-37264

Packages

EcosystemPackageAffectedFixed in
npm steal <= 2.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.

References

External links from the advisory. They lead to third-party sites.