Description
A prototype pollution vulnerability was found in module mpath <0.5.1 that allows an attacker to inject arbitrary properties onto Object.prototype.
Remediation
References
https://hackerone.com/reports/390860
Related Vulnerabilities
CVE-2020-9488 Vulnerability in maven package org.apache.logging.log4j:log4j
CVE-2022-40764 Vulnerability in npm package snyk-go-plugin
CVE-2018-20835 Vulnerability in maven package org.webjars.npm:tar-fs
CVE-2020-28271 Vulnerability in npm package deephas
CVE-2021-34078 Vulnerability in npm package lifion-verify-deps