Description
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Remediation
References
https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822
https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940
Related Vulnerabilities
CVE-2018-1999002 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2022-28820 Vulnerability in maven package com.adobe.acs:acs-aem-commons
CVE-2021-23358 Vulnerability in npm package underscore
CVE-2022-31069 Vulnerability in npm package @ffdc/nestjs-proxy
CVE-2022-39259 Vulnerability in maven package io.github.skylot:jadx-plugins-api