Description
undefsafe before 2.0.3 is vulnerable to Prototype Pollution. The 'a' function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
Remediation
References
https://github.com/remy/undefsafe/commit/f272681b3a50e2c4cbb6a8533795e1453382c822
https://snyk.io/vuln/SNYK-JS-UNDEFSAFE-548940
Related Vulnerabilities
CVE-2017-7661 Vulnerability in maven package org.apache.cxf.fediz:fediz-spring
CVE-2022-36094 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2020-15231 Vulnerability in maven package org.mapfish.print:print-lib
CVE-2019-19919 Vulnerability in maven package org.webjars.npm:handlebars
CVE-2020-26282 Vulnerability in maven package com.browserup:browserup-proxy-rest