GHSA-9mx2-prfp-8hqp
Prototype Pollution in simpl-schema
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | simpl-schema | < 1.10.2 | 1.10.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
This affects the package simpl-schema before 1.10.2. Attacker controlled input into a schema could result in remote code execution within the scope of the surrounding application.
References
External links from the advisory. They lead to third-party sites.