Description

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.

Remediation

References

https://snyk.io/vuln/SNYK-JS-MADLIBOBJECTUTILS-598676

Related Vulnerabilities

CVE-2019-5442 Vulnerability in maven package ro.pippo:pippo-jaxb

CVE-2022-29230 Vulnerability in npm package @shopify/hydrogen

CVE-2022-25898 Vulnerability in maven package org.webjars.bowergithub.kjur:jsrsasign

CVE-2023-29513 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates

CVE-2018-3721 Vulnerability in npm package lodash.mergewith

Severity

Critical

Classification

CWE-1321 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory