GHSA-x3wr-v4wx-5qpc
Prototype Pollution
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | expand-hash | <= 1.0.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Prototype pollution vulnerability in ‘expand-hash’ versions 0.1.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.
References
External links from the advisory. They lead to third-party sites.