Description
A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.
Remediation
References
https://hackerone.com/reports/430291
Related Vulnerabilities
CVE-2020-7777 Vulnerability in npm package jsen
CVE-2020-11973 Vulnerability in maven package org.apache.camel:camel-netty
CVE-2022-26183 Vulnerability in npm package pnpm
CVE-2023-26113 Vulnerability in npm package collection.js
CVE-2023-34659 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-parent