GHSA-p3pg-64pv-v7jg
Prototype Pollution in jsgui-lang-essentials
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | jsgui-lang-essentials | <= 0.4.3 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of package `jsgui-lang-essentials` are vulnerable to Prototype Pollution due to allowing all `Object` attributes to be altered, including their magical attributes such as `proto`, `constructor` and `prototype`.
References
External links from the advisory. They lead to third-party sites.