GHSA-fpm5-vv97-jfwg
Uncontrolled Resource Consumption in firebase
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | @firebase/util | < 0.3.4 | 0.3.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program.
References
External links from the advisory. They lead to third-party sites.