Description
A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions.
Remediation
References
https://hackerone.com/reports/430291
Related Vulnerabilities
CVE-2020-28458 Vulnerability in maven package org.webjars.npm:datatables.net
CVE-2022-41929 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2015-0250 Vulnerability in maven package org.apache.xmlgraphics:batik-dom
CVE-2020-7608 Vulnerability in npm package yargs-parser
CVE-2020-9548 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind