~ / search / GHSA-p33m-7w7f-gmj8

GHSA-p33m-7w7f-gmj8

Uncontrolled Resource Consumption in fun-map

Source: GitHub Advisory Database (reviewed) High CVE-2020-7644

Packages

EcosystemPackageAffectedFixed in
npm fun-map <= 3.3.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.

References

External links from the advisory. They lead to third-party sites.