~ / search / GHSA-9829-jj5p-j6hf

GHSA-9829-jj5p-j6hf

Prototype Pollution in worksmith

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7725

Packages

EcosystemPackageAffectedFixed in
npm worksmith <= 1.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function.

References

External links from the advisory. They lead to third-party sites.