Description
lib/utils.js in mquery before 3.2.3 allows a pollution attack because a special property (e.g., __proto__) can be copied during a merge or clone operation.
Remediation
References
https://github.com/aheckmann/mquery/commit/792e69fd0a7281a0300be5cade5a6d7c1d468ad4
Related Vulnerabilities
CVE-2022-21721 Vulnerability in npm package next
CVE-2023-46495 Vulnerability in npm package @evershop/evershop
CVE-2022-31367 Vulnerability in npm package @strapi/strapi
CVE-2023-29924 Vulnerability in maven package tech.powerjob:powerjob
CVE-2021-21391 Vulnerability in npm package @ckeditor/ckeditor5-list