~ / search / GHSA-mj4p-gmhr-92g3

GHSA-mj4p-gmhr-92g3

@akbr/update Prototype Pollution

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-36578

Packages

EcosystemPackageAffectedFixed in
npm @akbr/update <= 1.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js.

References

External links from the advisory. They lead to third-party sites.