~ / search / GHSA-jpq3-xf27-5jf2

GHSA-jpq3-xf27-5jf2

Prototype Pollution in safe-object2

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7726

Packages

EcosystemPackageAffectedFixed in
npm safe-object2 <= 1.0.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.

References

External links from the advisory. They lead to third-party sites.