~ / search / GHSA-p6jh-p7q8-pcrg

GHSA-p6jh-p7q8-pcrg

Prototype Pollution in nodee-utils

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-7722

Packages

EcosystemPackageAffectedFixed in
npm nodee-utils < 1.2.3 1.2.3

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package nodee-utils below version 1.2.3 are vulnerable to Prototype Pollution via the deepSet function.

References

External links from the advisory. They lead to third-party sites.