Description
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.
Remediation
References
https://github.com/b-heilman/bmoor/commit/7d4a086a1dc3ef11ed0b323824d02348734b7da5
https://snyk.io/vuln/SNYK-JS-BMOOR-598664
Related Vulnerabilities
CVE-2022-36025 Vulnerability in maven package org.hyperledger.besu:evm
CVE-2022-34112 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2020-7768 Vulnerability in maven package org.webjars.npm:grpc
CVE-2023-4316 Vulnerability in npm package zod
CVE-2023-34462 Vulnerability in maven package io.netty:netty-handler