Description
The package copy-props before 2.0.5 are vulnerable to Prototype Pollution via the main functionality.
Remediation
References
https://github.com/gulpjs/copy-props/pull/7
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1088047
https://snyk.io/vuln/SNYK-JS-COPYPROPS-1082870
Related Vulnerabilities
CVE-2021-21388 Vulnerability in npm package systeminformation
CVE-2021-32808 Vulnerability in npm package ckeditor4
CVE-2023-22899 Vulnerability in maven package net.lingala.zip4j:zip4j
CVE-2022-25851 Vulnerability in npm package jpeg-js
CVE-2022-39299 Vulnerability in npm package @node-saml/passport-saml