~ / search / GHSA-vwhq-pm3r-fjm9

GHSA-vwhq-pm3r-fjm9

steal vulnerable to Prototype Pollution via key variable in babel.js

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-37266

Packages

EcosystemPackageAffectedFixed in
npm steal <= 2.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Prototype pollution vulnerability in function extend in babel.js in stealjs steal via the key variable in babel.js.

References

External links from the advisory. They lead to third-party sites.