~ / search / GHSA-cxm3-284p-qc4v

GHSA-cxm3-284p-qc4v

Prototype Pollution in sds

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7618

Packages

EcosystemPackageAffectedFixed in
npm sds < 4.0.0 4.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Affected versions of `sds` are vulnerable to prototype pollution. The `set` function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. ## Recommendation Upgrade to version 4.0.0 or later

References

External links from the advisory. They lead to third-party sites.